Observed arrival · 2026-11-12
VORTEX24, a malware operator dashboard
Credibility concern recorded. The source reference remains available for verification and correction.
A gated-looking control panel advertises Windows payload generation alongside telemetry for stolen credentials, cookies, tokens, and wallets.
- For
- Operators seeking credential-theft tooling
- Worth noticing
- The page pairs an operator authorization screen with a zero-node telemetry display and a payload-building interface.
Field notes
The interface separates telemetry, payload configuration, and settings into distinct console sections. Its counters show zero activity in the extracted view, while the builder presents numerous configuration choices; the page does not verify that any of them produce working files. An operator authorization screen is visible, and no pricing, documentation, or contact information appears in the supplied evidence.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue