A system for security threat detection in data transmission extracts data features from a data file. The system compares each data feature with a corresponding historical data feature associated with a historical transmission of the data file. The system determines whether the data feature deviates from the corresponding historical data feature. In response to determining that the data feature deviates from the corresponding historical data feature, the system determines that the data feature is associated with a security threat that makes the data file vulnerable to unauthorized access. The system determines whether more than a threshold percentage of the data features are associated with security threats. If it is determined that more than the threshold percentage of the data features are associated with security threats, the system terminates the transmission of the data file.