🐾 - 🔒 TLS connection to (sni) - filetransfer.io - File Sharing solution 🗃 - Possible Leak 🚱 - seen in 🔒 Conti Ransomware Leak - Suricata Rule 3300635 (pawpatrules)

🐾 - 🔒 TLS connection to (sni) - filetransfer.io - File Sharing solution 🗃 - Possible Leak 🚱 - seen in 🔒 Conti Ransomware Leak

SID: 3300635Rev: 83 viewsHistory

Sourcepawpatrules

CreatedMay 9, 2023

UpdatedSeptember 16, 2025

Classificationbad-unknown

alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🔒 TLS connection to (sni) - filetransfer.io - File Sharing solution 🗃 - Possible Leak 🚱 - seen in 🔒 Conti Ransomware Leak"; flow:to_server, stateless; tls_sni; content:"filetransfer.io"; nocase; pcre:"/(^|\.)filetransfer\.io$/"; metadata:created_at 2023_05_09, updated_at 2025_09_16; sid:3300635; rev:8; classtype:bad-unknown;)

🐾 - 🔒 TLS connection to (sni) - filetransfer.io - File Sharing solution 🗃 - Possible Leak 🚱 - seen in 🔒 Conti Ransomware Leak

Metadata

Comments (0)