ThreatFox (abuse.ch)
About ThreatFox (abuse.ch)
ThreatFox is a free, community-driven platform by abuse.ch for sharing indicators of compromise associated with malware, including domains, URLs, IP addresses, and file hashes. Part of the abuse.ch ecosystem alongside URLhaus, MalwareBazaar, and Feodo Tracker. The platform aggregates IOCs submitted by security researchers worldwide and provides free API access, STIX/TAXII feeds, and integration with MISP. Used by SOC teams, threat hunters, and CERTs for enriching alerts with known-malicious indicator context.
Why Notable
Free community IOC sharing; abuse.ch ecosystem; STIX/TAXII feeds; MISP integration
