en
KORTEXKORTEX // STEALCSKortexStealer (also known as KORTEX and KORTEX // STEAL) is a variant of an information-stealing malware family. As of 11/10/2026, CyStack's research assesses low attribution confidence.
Note: This data is provided for reference and cybersecurity research only.
CyStack recommends that users do not use this information for unlawful purposes
Original English
CSKortexStealer is a CyStack-coined identifier for the
KORTEX // STEAL System.txt log observed inside the
APRIL 25 - 19977 LOGS Telegram-pack distribution in
<CC>_<IP>_<DD-MM-YY>/ victim folders alongside XFiles and
RedlineLikeStealer shapes. Format combines a dash-prefix
identity block with sectioned hardware records.
Infostealer data represents only a fraction of modern data theft threats. With the Threat Intelligence component in the CyStack VulnScan solution suite, organizations can investigate each threat and credential exposure in depth, mapping C2, IOCs, and other actionable threat intelligence.
