CSV
Threat Data
Curated CSV datasets for threat intelligence, threat hunting, and security operations.
| File Name | Description | Vendor | Version | Updated | Size | Downloads | Tags | |
|---|---|---|---|---|---|---|---|---|
| 737 Chrome VPN Extensions Hijack Browser Traffic Through SOCKS5 Proxies | Socket researchers identified 737 Chrome VPN and proxy extensions linked to a coordinated campaign that accumulated 75,486 installs. The extensions impersonate 66 established VPN and privacy brands and use Chrome's proxy settings to route browser traffic through shared SOCKS5 infrastructure, potentially placing attackers in an adversary-in-the-middle position. | Chrome | 1.0 | Sep 2, 2026 | 24.5 KB | 36 | Browser extension ID | Download |
| Real-time tracking of malicious browser extensions from multiple threat intelligence sources. | Store Reports: Policy violations. Researchers: Security expert submissions. Threat Feeds: Known malicious extensions. Community: User-contributed detections. Chrome Blocklist: Google-blocked extensions. Continuous Updates: New threats added regularly. Details: ID, category, source, date. | Browser | 1.0 | Sep 2, 2026 | 1.3 MB | 18 | extensionsextension_idmalicious | Download |
| tor-exit-nodes | Tor exit nodes are the final relays in the Tor circuit that send decrypted traffic to its open internet destination. Websites you visit see the exit node's IP address rather than your own. Because this unencrypted traffic emerges here, operators of exit nodes face legal liability for the traffic they carry. | Generic | 1.0 | Sep 2, 2026 | 41.8 KB | 40 | Tor | Download |
| Malicious HTTP User Agents | Collection of malicious and suspicious User-Agent strings observed in threat intelligence, malicious scanning, exploitation attempts, bot activity, and other suspicious network activity. | HTTP Logs | 1.0 | Sep 2, 2026 | 421.4 KB | 6 | malicious-user-agentuser-agentbot | Download |
Showing 4 of 4 results
Have threat data to share?
If you have a useful dataset for the community, please contact us.