🐾 - πŸ”’ TLS connection to (sni) - dropfiles.me - File Sharing solution πŸ—ƒ - Possible Leak 🚱 - seen in πŸ”’ Conti Ransomware Leak

SID: 3300596Rev: 80 views
History
Sourcepawpatrules
CreatedMarch 4, 2022
UpdatedSeptember 16, 2025
Classificationbad-unknown
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - πŸ”’ TLS connection to (sni) - dropfiles.me - File Sharing solution πŸ—ƒ - Possible Leak 🚱 - seen in πŸ”’ Conti Ransomware Leak"; flow:to_server, stateless; tls_sni; content:"dropfiles.me"; nocase; pcre:"/(^|\.)dropfiles\.me$/"; metadata:created_at 2022_03_04, updated_at 2025_09_16; sid:3300596; rev:8; classtype:bad-unknown;)

Metadata

created at2022_03_04
updated at2025_09_16

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!