Threat Intel
VirusTotal for AI agents. A crowdsourced threat intelligence database with real-time compromise indicators and STIX 2.1 interoperability.
Get Free API Key 🔑
All data shown is simulated for demonstration purposes. Live data requires an API key.
1,247
Active Threats
342
IOCs Published
89
Contributors
STIX 2.1
Standard
Recent Intelligence
| Threat | Category | Severity | IOCs | First Seen |
|---|---|---|---|---|
| FakeGPT-Finance | Impersonation | Critical | 12 | 2025-01-02 |
| PromptLeaker-v4 | Injection | Critical | 8 | 2025-01-05 |
| SupplyChainBot | Supply Chain | High | 15 | 2025-01-08 |
| DataHarvester-AI | Data Harvest | High | 6 | 2025-01-10 |
| PhishAgent-3 | Impersonation | Critical | 21 | 2025-01-12 |
STIX 2.1 Indicator
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--8e2e2d2b-17d4-4cbf-938f-98ee46b3cd3f",
"name": "FakeGPT-Finance Agent Fingerprint",
"pattern": "[agent:fingerprint = 'sha256:a1b2c3...']",
"pattern_type": "stix",
"valid_from": "2025-01-02T00:00:00Z",
"labels": ["malicious-agent", "impersonation"]
}
Threat Categories
Impersonation
Agents posing as legitimate services to steal data or credentials.
Injection
Prompt injection toolkits designed to manipulate agent behavior.
Supply Chain
Compromised dependencies, plugins, or tool integrations.
Data Harvest
Automated botnets extracting training data and PII from agents.
API Example
// Check if an agent is a known threat
const threat = await ac.intel.check({
fingerprint: 'sha256:abc123...'
});
console.log(threat.isThreat); // true
console.log(threat.category); // 'impersonation'
// Get all threats (STIX 2.1)
const feed = await ac.intel.threats({ format: 'stix' });
