Free threat intelligence platform. Search 2.6M+ IOCs, malware analysis, smart contract auditing. Open source SIEM.
🔍 Free threat intel search:
👉 https://threatchain.io
| Threat Search | https://threatchain.io |
| GitHub | github.com/threatchain |
| Blog | https://threatchain.io/blog |
Your security tools might have missed this one. Prometei is actively targeting networks right now — here's what you need to know before it hits yours.
Full analysis: https://threatchain.io/prometei-sample-detected-77bd50f5f45bc364014a015c203bd353881e59ecef3ca7ebab005cf-77bd50f5
Your security tools might have missed this one. SalatStealer is actively targeting networks right now — here's what you need to know before it hits yours.
Full analysis: https://threatchain.io/salatstealer-sample-detected-winwsdriver-exe-a3a2fe50
It costs $50 on Telegram. It steals everything in your browser. And most antivirus misses it completely.
Full analysis: https://threatchain.io/stealc-sample-detected-file-12176812
Your security tools might have missed this one. Xtrat is actively targeting networks right now — here's what you need to know before it hits yours.
Full analysis: https://threatchain.io/xtrat-sample-detected-eastvillageeaterys-bffa9209
CVE of the week: CVE-2024-6670
CVSS 9.8 · EPSS 94.5% (top percentile) · CISA KEV (actively exploited)
Vendor: progress
In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password....
Full context + related CVEs: https://threatchain.io/cve-detail?id=CVE-2024-6670
Your home router might be attacking websites right now and you'd never know. Millions are already compromised.
Full analysis: https://threatchain.io/mirai-sample-detected-boatnet-mpsl-d157b650
Your security tools might have missed this one. WannaCry is actively targeting networks right now — here's what you need to know before it hits yours.
Full analysis: https://threatchain.io/wannacry-sample-detected-2318cacaf04dccd78420bfb0510ddd906e670fe0eb63113d00d3a04-2318caca
Shipped: ThreatChain MCP server.
Seven native tools for any MCP-compatible LLM agent:
- Hash lookup (9M+ indicators, VirusTotal + Hybrid + MalwareBazaar)
- CVE search (345K+, EPSS + KEV enriched)
- Wallet exposure (EVM chains)
- Rugpull score (ERC-20 contracts)
- CVE batch, threat feed, enrichment
Config block at threatchain.io/mcp-docs — works in Claude Desktop, Cursor, Cline, any MCP client. Free tier, no API key required.
That email attachment your coworker just opened? It's copying every password they've ever saved. Right now.
Full analysis: https://threatchain.io/agenttesla-sample-detected-scandoc275-vbs-d702322e
That 'free software' download just exfiltrated every password, cookie, and autofill entry on your machine in under 5 seconds.
Full analysis: https://threatchain.io/vidar-sample-detected-launcher-exe-3cc6feee