🐾 - 🔒 TLS connection to (sni) - privatlab.com - File Sharing solution 🗃 - Possible Leak 🚱 - seen in 🔒 Conti Ransomware Leak - Suricata Rule 3300597 (pawpatrules)

🐾 - 🔒 TLS connection to (sni) - privatlab.com - File Sharing solution 🗃 - Possible Leak 🚱 - seen in 🔒 Conti Ransomware Leak

SID: 3300597Rev: 80 viewsHistory

Sourcepawpatrules

CreatedMarch 4, 2022

UpdatedSeptember 16, 2025

Classificationbad-unknown

alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🔒 TLS connection to (sni) - privatlab.com - File Sharing solution 🗃 - Possible Leak 🚱 - seen in 🔒 Conti Ransomware Leak"; flow:to_server, stateless; tls_sni; content:"privatlab.com"; nocase; pcre:"/(^|\.)privatlab\.com$/"; metadata:created_at 2022_03_04, updated_at 2025_09_16; sid:3300597; rev:8; classtype:bad-unknown;)

🐾 - 🔒 TLS connection to (sni) - privatlab.com - File Sharing solution 🗃 - Possible Leak 🚱 - seen in 🔒 Conti Ransomware Leak

Metadata

Comments (0)