Back to Rule

Rule History

SID: 3300519 • Source: pawpatrules

Versions (2)

Version DetailsCurrent

Rev: 3Aug 18, 2023, 12:00 PM

🐾 - ⚠ DNS Request 🌐 - sendbig.com - Data Sharing solution 🗃 - Possible Leak 🚱 - used by 🔒 LockBit Ransomware Group

alert dns any any -> any any (msg:"🐾 - ⚠ DNS Request 🌐 - sendbig.com - Data Sharing solution 🗃 - Possible Leak 🚱 - used by 🔒 LockBit Ransomware Group"; flow:to_server, stateless; dns_query; content:"sendbig.com"; nocase; pcre:"/(^|\.)sendbig\.com$/"; metadata:created_at 2023_08_18, updated_at 2025_09_16; sid:3300519; rev:3; classtype:bad-unknown;)

Aug 18, 2023, 12:00 PM

Sep 16, 2025, 12:00 PM

Feb 21, 2024, 4:00 PM

Sep 16, 2025, 8:34 PM

rules/PAW-PATRULES_LEAKS.rules