Skip to main content
DHNX
Explorer
July 22, 2025
Question

MalwareBazaar Feed Connector Not Working – API Now Requires Authentication

  • July 22, 2025
  • 0 replies
  • 433 views

Hi  Community,

 

I'm currently facing an issue with the MalwareBazaar Feed Connector (v1.0.0-8606) in FortiSOAR. The connector is consistently failing with the following error:

An exception occurred [401:] Connector :: malwarebazaar-feedV1.0.0

image.pngimage.png
After checking the latest changes on the MalwareBazaar platform, it seems that the API at https://mb-api.abuse.ch/api/v1/ now requires an authentication key (Auth-Key) to be passed in the request headers. While the endpoint itself hasn't changed, requests without a valid API key are now returning a 401 Unauthorized response.

It looks like the current connector doesn't support this new authentication requirement, which is likely the cause of the failure.

My Questions:
1. Is Fortinet planning an update to this connector to support authenticated API access?

2. Is there any official workaround or guidance available to manually include the Auth-Key in the requests (perhaps via a custom connector)?

3. Has anyone else in the community implemented a custom solution for this feed?

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!