HEXSENTINEL
Analyste binaire et malware
Profil professionnel
HexSentinel lit le code machine comme s’il s’agissait de littérature. Fort d’une expérience de reverse engineer dans un laboratoire de défense, il compte parmi les meilleurs analystes de malwares industriels et de vers complexes.
Compétences clés
Reverse engineering avancé; analyse binaire de bas niveau; déobfuscation et unpacking; analyse du comportement des malwares ICS/SCADA; développement de signatures YARA complexes
Réalisations majeures
Désassemblage d’un malware ICS en 16 heures, en retraçant sa chaîne d’outils jusqu’à l’attaquant.; découverte du bug logique derrière un ver de supply chain affectant des dépôts NPM.
Articles de HEXSENTINEL
Leak-Site Clock Ticks, But the Breach Remains Unproven
A new victim entry linked to N0n names a Michigan cannabis operator and sets a future publication time, yet the listing alone does not confirm a successful intrusion or data theft.
Clock-Ticking Ransomware Listing Puts a Florida Firm in the Spotlight
A newly posted victim entry attributed to N0n shows how an unverified listing can signal potential operational and reputational risk without proving a breach.
Rhysida’s Latest Leak Claim Puts Legal Finance Records in the Spotlight
A new extortion-style victim page names Reed & Giordano PA and lists sensitive files that could create fraud and privacy risk if the claims are accurate.
Leak-Site Victim Labels Can Move Faster Than Proof
Qilin has been tied to a new victim listing naming Friendship Christian School, but the public record here does not confirm a breach, data theft, or operational impact.
Extortion Listing Puts a Florida Design Firm Under a Public Countdown
A victim page linked to N0n names an architecture and design company in Florida and attaches a future exposure time, but the alleged data leak remains unverified.
Dragonforce’s Latest Claim Puts TQC S.A. in the Spotlight
A ransomware listing allegedly posted by Dragonforce claims a 750 GB data release, but the incident details remain unverified and the operational impact is not yet established.
Healthcare Leak Claim Lands in Winnipeg, but the Evidence Still Stops at the Post
A newly published victim entry tied to Incransom and hsc.mb.ca raises a sensitive question for healthcare defenders: what is confirmed, what is claimed, and what remains unproven.
Qilin Listing Puts Glenhardie Country Club Into the Ransomware Spotlight
A victim entry tied to Qilin names Glenhardie Country Club, but the available record does not confirm a breach, data theft, or the real scope of any incident.
Extortion Listing Names Anaergia, But the Incident Picture Is Still Unproven
A new victim post tied to Cry0 puts the Canadian firm in the ransomware spotlight, yet the available record stops short of confirming breach, theft, or operational impact.
Bravox Lists Dudley Land Company as a New Victim, but the Breach Picture Is Unclear
A ransomware-extortion victim listing can signal pressure, not proof: the public record names Dudley Land Company, but it does not confirm theft, disruption, or root cause.
Termite’s Latest Victim Claim Puts a Dental Cloud in the Crosshairs
A victim listing tied to iDentalSoft raises operational and data-risk questions, but the available facts do not confirm a breach, theft, or encryption.
Deadline Posted Beside a Fresh Ransomware Listing for Ladrillera Mecanizada
Arcusmedia is tied to a new victim entry, but the underlying technical cause and any downstream impact remain unconfirmed.
BYOD Post Puts T-Mobile Name in an Extortion Spotlight
A public threat post names T-Mobile, but the claimed data exposure and any underlying intrusion remain unverified.
Redacted Victim, Running Clock: The Latest Ransomware Post That Says More Than It Proves
A newly posted victim entry linked to Silentransomgroup is visible, but the target remains hidden and the alleged incident is still unverified.
Nightspire Listing Sparks Concern, but the Evidence Trail Is Still Thin
A ransomware-related entry names Nantou Shiuhkuang Senior High School, yet the available details stop short of confirming a breach, data theft, or operational disruption.
Nightspire’s New Victim Tag Puts KSL Dirtworks Under a Cloud of Uncertainty
A fresh ransomware claim has appeared, but the available information still stops short of proving a breach, data theft, or real-world impact.
Reported Nightspire Victim Claim Puts Royal EGT in the Extortion Spotlight
A newly published victim name is not proof of compromise, but it can still trigger real defensive and reputational pressure.
Nightspire Victim Listing Puts INI Fiocruz in the Spotlight, but the Evidence Is Thin
A ransomware.live entry names INI Fiocruz as a Nightspire victim, yet the record does not establish a breach timeline, scope, or any confirmed data loss.
Nightspire Victim Claim Puts a Professional Association in the Extortion Spotlight
A ransomware listing naming the Asociación de Escribanos del Uruguay has not been independently verified, but it shows how public victim claims are used to create pressure before facts are clear.
Lockbit5 Victim Tag Puts a Banking Domain in the Spotlight, but Proof Remains Thin
A victim listing tied to Capital Bank SA raises extortion concerns, yet the available evidence stops short of confirming breach, theft, or disruption.