HEXSENTINEL
Analyste binaire et malware
Profil professionnel
HexSentinel lit le code machine comme s’il s’agissait de littérature. Fort d’une expérience de reverse engineer dans un laboratoire de défense, il compte parmi les meilleurs analystes de malwares industriels et de vers complexes.
Compétences clés
Reverse engineering avancé; analyse binaire de bas niveau; déobfuscation et unpacking; analyse du comportement des malwares ICS/SCADA; développement de signatures YARA complexes
Réalisations majeures
Désassemblage d’un malware ICS en 16 heures, en retraçant sa chaîne d’outils jusqu’à l’attaquant.; découverte du bug logique derrière un ver de supply chain affectant des dépôts NPM.
Articles de HEXSENTINEL
Extortion Listing Puts a Shipping Finance Trail Under the Spotlight
A victim page tied to Dong-A Tanker points to internal financial records, but the underlying intrusion and business impact remain unverified.
Leak-Site Listing Puts Dongkuk Steel Under Extortion Spotlight
A ransomware-style post names the South Korean steel maker and claims invoice and settlement records were exposed, but the underlying breach remains unverified.
Port Community IT Listing Draws Attention to Billing and EDI Data Risk
A victim entry tied to GNCNet / DGT Busan names billing records and operational EDI sample material, but the public record does not establish the full technical path or the true scope of any incident.
Port Community Data Names Surface in a Fresh Ransomware Victim Listing
A posted victim entry tied to GCS Kuwait points to port operations data and EDI archives, but the listing itself does not confirm the full incident path or technical scope.
Port Terminal Leak Claim Puts Logistics Records Under Extortion Pressure
A victim post tied to N0n names a Brazil-based terminal operator and alleges unpaid status, but the file exposure claim remains unverified.
Port Records Put Under Extortion Pressure in a Fresh Victim Listing
A new ransomware-style entry names a Germany-based port consulting firm and points to EDI archives and cargo records, but the underlying breach claim remains unverified.
Logistics Files Put Under Extortion Pressure in New N0n Listing
A ransomware listing attributed to N0n names Yusen Logistics Hong Kong and mentions commercial tariff documentation, but the underlying claim remains unverified.
Port Logistics Files Marked for Exposure in Fresh Extortion Claim
A victim-posting tied to N0n names ZPMC and lists operational EDI archives and cargo loading records, but the compromise itself is not independently confirmed.
Maritime Records Turned Into Leverage in a Claimed Extortion Post
A named shipping company has appeared in a ransomware-style leak claim that points to finance and vessel documents, but the technical facts remain unverified.
Ransom Note Hits a Cargo Node as Terminal Data Gets Pulled Into the Spotlight
A ransomware listing tied to Portonave points to exposed terminal databases and EDI archives, but the claim remains unverified and the technical path is still unclear.
Port Terminal Leak Claim Puts Billing Records in the Crosshairs
A newly listed case tied to South Korea port terminal operations centers on claimed exposure of commercial invoices and billing material, while the full technical picture remains unconfirmed.
Healthcare System Lands on an Extortion Board, but the Real Damage Is Still Unclear
A victim listing tied to Metaencryptor places MyMichigan Health in the ransomware spotlight, yet the publicly visible facts stop short of proving a breach, data theft, or outage.
Victim Post Raises Questions for Prodiel After Qilin Publication
A reported Qilin victim listing has put Prodiel in the ransomware spotlight, but the underlying incident details remain unverified.
Victim Listing Sparks Questions, But Proof Still Matters
A new Incransom-linked listing for brookslawfirm.com raises privacy and compliance concerns, yet the available information still stops short of proving a full breach.
Interlock’s Latest Leak Claim Puts a Specialized Contractor in the Spotlight
A new victim entry tied to Interlock suggests a possible data-extortion play against Engineers Contractors Fabricators Inc. (ECF), but the underlying compromise is not independently verified.
Akira Claim on PIC Group Raises the Stakes for Sensitive Project Records
A ransomware post names PIC Group, Inc. and claims 8 GB of corporate data is pending release, but the allegation remains unverified and the breach path is not established.
Nightspire Listing Puts Cognosis Limited in the Spotlight, But Proof Is Still Thin
A fresh victim listing has appeared, yet the public record does not confirm a breach, stolen data, or any operational impact.
Port Terminal Leak Claim Puts Operational Records Under a Threat Lens
A ransomware listing linked to N0n names Pusan Newport Company and points to sensitive terminal records, but the exposure claim is not independently verified.
Port Extortion Post Puts Shipping Records Under a Harsh Spotlight
A victim entry tied to Indonesia’s port logistics sector highlights how manifest and EDI data can become leverage in ransomware-driven pressure campaigns, even while the key claims remain unverified.
Extortion Claim Targets Shipping Records, Not Just Cargo
A new victim listing tied to a Japan-based ferry and RoRo operator shows how freight and payment files can become leverage before any breach is proven.