HEXSENTINEL
Analyste binaire et malware
Profil professionnel
HexSentinel lit le code machine comme s’il s’agissait de littérature. Fort d’une expérience de reverse engineer dans un laboratoire de défense, il compte parmi les meilleurs analystes de malwares industriels et de vers complexes.
Compétences clés
Reverse engineering avancé; analyse binaire de bas niveau; déobfuscation et unpacking; analyse du comportement des malwares ICS/SCADA; développement de signatures YARA complexes
Réalisations majeures
Désassemblage d’un malware ICS en 16 heures, en retraçant sa chaîne d’outils jusqu’à l’attaquant.; découverte du bug logique derrière un ver de supply chain affectant des dépôts NPM.
Articles de HEXSENTINEL
Fresh Victim Listing Puts N0n Back in the Spotlight, but the Evidence Is Still Thin
A new entry tied to a U.S. manufacturing company is marked “pending exposure,” a label that signals pressure without confirming a breach.
Qilin’s New Victim Notice Puts Joliet Schools in the Extortion Spotlight
A published victim notice tied to Joliet Public Schools District 86 highlights how ransomware crews use public exposure as pressure, while the underlying incident details remain unverified.
Another Victim Name Lands in Qilin’s Orbit, But the Real Damage Is Still Unclear
MOA Architecture appears in a victim-disclosure post tied to Qilin, yet the public record does not confirm a breach, data theft, or the wider impact of any incident.
Threats Turn Personal as Ransomware Operators Add AI to the Pressure Playbook
A recent risk report points to a sharper extortion pattern: threats reaching employees’ families and friends, alongside AI appearing in many surveyed attacks.
Leak-Claim Pressure Builds Around an Architecture Firm, with Email and Project Files in the Crosshairs
A new extortion listing names a Florida architecture practice and alleges exposure of email archives, financial records, and project files, but the technical path remains unconfirmed.
One Victim Label, Many Questions: LockBit5 Listing Puts a French Public Body in the Frame
A LockBit5-linked victim entry naming saintpierredescorps.fr appears in a ransomware/extortion context, but the available material does not verify compromise, scope, or data theft.
Ransomware Extortion Is Crossing Into Personal Intimidation
Organizations are reporting threats aimed at employees and families, but the most alarming claims remain hard to verify.
When a Victim Name Hits the Ransomware Board, the Risk Starts Before Proof
Interseguro has been posted in a ransomware-and-extortion context tied to Direwolf, but the public record here remains a listing, not a confirmed breach.
Qilin Publishes a New Victim Claim Involving a Municipal Water Utility
A ransomware listing tied to a public utility is a reminder that extortion claims can create concern fast, even when the full technical picture is still unconfirmed.
N0n Lists a New Victim, But Exposure Remains Unconfirmed
A ransomware-extortion post names "Company #63" in New York, yet the status tag stops short of confirming any breach or data release.
Orova Listing Puts a Malaysian Oil Support Firm in the Ransomware Spotlight
A new victim entry naming Alfameli Group is unverified, but it shows how extortion listings can quickly put service firms under pressure.
Ransomware Listing Puts a Marine Electronics Firm in the Spotlight, but Proof Remains Limited
A new victim name has entered an extortion-related tracker, yet the visible record stops short of confirming breach scope, data theft, or operational disruption.
Qilin Namecheck Lands a Law Firm in the Extortion Spotlight
A new victim entry names Iliff, Meredith, Wildberger & Brennan, P.C., but the listing alone does not prove a breach, theft, or operational disruption.
Sarcoma Listing Centers on a 1.2 TB Claim and an Unnamed USA Victim
A newly posted extortion entry highlights a large alleged leak, but the victim remains unnamed and the file labels do not confirm what was actually taken.
Emperador Victim Post Names CMC AUDITORES SRL
A reported victim post linked to CMC AUDITORES SRL raises the possibility of exposed personnel and client records, while the technical details remain unconfirmed.
Leak Post Pushes Business Files and Care-Adjacent Data Into the Same Extortion Frame
A ransomware listing names MarieBelle New York and claims exposure of accounting, inventory, and telehealth-related records, but the alleged compromise remains unverified.
Healthcare Leak Claim Puts Patient Data and Source Code in the Crosshairs
A Panzer-linked publication claim involving Zenidoc raises concern around sensitive medical records, support material, and development assets, though the alleged contents remain unverified.
Architecture Firm Named in a New Ransomware Claim
A victim listing tied to Panzer has put Valode & Pistre in the ransomware frame, but the available facts stop short of proving compromise.
MSSP Threat Hunting Takes the Spotlight in a Ransomware Briefing
A ransomware-focused piece centers on how managed security providers can strengthen threat hunting, with analysis based on ANY.RUN research and findings.
Play Listing Pushes Another Company Name Into the Ransomware Spotlight
Advanced Imaging Solutions has appeared in a Play-linked victim listing, but the public record still does not confirm a breach, data theft, or any operational impact.