🐾 - 🔒 TLS connection to (sni) - qaz.is - File Sharing solution 🗃 - Possible Leak 🚱 - seen in 🔒 Conti Ransomware Leak - Suricata Rule 3300636 (pawpatrules)

🐾 - 🔒 TLS connection to (sni) - qaz.is - File Sharing solution 🗃 - Possible Leak 🚱 - seen in 🔒 Conti Ransomware Leak

SID: 3300636Rev: 81 viewsHistory

Sourcepawpatrules

CreatedMay 9, 2023

UpdatedSeptember 16, 2025

Classificationbad-unknown

alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🔒 TLS connection to (sni) - qaz.is - File Sharing solution 🗃 - Possible Leak 🚱 - seen in 🔒 Conti Ransomware Leak"; flow:to_server, stateless; tls_sni; content:"qaz.is"; nocase; pcre:"/(^|\.)qaz\.is$/"; metadata:created_at 2023_05_09, updated_at 2025_09_16; sid:3300636; rev:8; classtype:bad-unknown;)

🐾 - 🔒 TLS connection to (sni) - qaz.is - File Sharing solution 🗃 - Possible Leak 🚱 - seen in 🔒 Conti Ransomware Leak

Metadata

Comments (0)