πΎ - π TLS connection to (sni) - dropfiles.me - File Sharing solution π - Possible Leak π± - seen in π Conti Ransomware Leak
Sourcepawpatrules
CreatedMarch 4, 2022
UpdatedSeptember 16, 2025
Classificationbad-unknown
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"πΎ - π TLS connection to (sni) - dropfiles.me - File Sharing solution π - Possible Leak π± - seen in π Conti Ransomware Leak"; flow:to_server, stateless; tls_sni; content:"dropfiles.me"; nocase; pcre:"/(^|\.)dropfiles\.me$/"; metadata:created_at 2022_03_04, updated_at 2025_09_16; sid:3300596; rev:8; classtype:bad-unknown;)
Metadata
created at2022_03_04
updated at2025_09_16
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!