Vortex
New Group | Active
This is an emerging group, so claims should be treated with caution until independently verified.
None
Victims
14
First Victim
2026-09-17
(est. attack date)
Discovery Date
2026-11-10
Last Seen
2026-11-10
Inactive Since
0
days
Avg Delay
36.1
days
Infostealer
N/A
victims with domain
Countries
2
hit
Uptime
90.0% avg (30d)
Data Exfiltrated
4.4 TB
reported across 5/14 victims
Attack Velocity — Last 12 months (based on attack estimated date if available)
+150% vs last month
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
VORTEX | Yes | 2026-11-10T14:22:33 |
zyz6phauvraxghujxmecpwzlg34gtogybb4wzcmw6pvps5m2nzvsriid.onion
|
Target
Top 5 Activity Sectors
- Healthcare 7
- Manufacturing 3
- Retail & E-Commerce 1
- Transportation 1
- Hospitality 1
Top 5 Countries
-
United States
13
-
Germany
1
Heatmap
Victims (14)
Type: FULL
Massive tenant PII exposure at scale: tens of thousands of rental agreements containing n…
Type: DATA
accounts payable/receivable, audited financials FY2006–FY2013, TRS restructuring, total o…
Type: FULL
════════════════════════════════════════════════════════════════
ANDERSEN CONSTRUCTION — …
Type: FULL
Severe healthcare exposure: tens of thousands of patient clinical records and PHI, physic…