🐾 - 🚨 Rclone Upload data to mega.nz - File Sharing solution 🗃 - Possible file exfiltration 🗃 - Leak 🚱
Sourcepawpatrules
CreatedAugust 23, 2023
UpdatedAugust 23, 2023
Classificationpolicy-violation
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🚨 Rclone Upload data to mega.nz - File Sharing solution 🗃 - Possible file exfiltration 🗃 - Leak 🚱"; flow:to_server, stateless; http.method; content:"POST"; http.user_agent; content:"rclone/"; nocase; http.host.raw; content:"userstorage.mega.co.nz"; fast_pattern; endswith; reference:url,https://rclone.org/; reference:url,https://mega.nz/; target:src_ip; metadata:created_at 2023_08_23, updated_at 2023_08_23; sid:3300115; rev:1; classtype:policy-violation;)
References
Metadata
created at2023_08_23
updated at2023_08_23
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!