🐾 - 🔒 TLS connection to (sni) - sendbig.com - File Sharing solution 🗃 - Possible Leak 🚱 - used by 🔒 LockBit Ransomware Group

SID: 3300639Rev: 81 views
History
Sourcepawpatrules
CreatedAugust 18, 2023
UpdatedSeptember 16, 2025
Classificationbad-unknown
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🔒 TLS connection to (sni) - sendbig.com - File Sharing solution 🗃 - Possible Leak 🚱 - used by 🔒 LockBit Ransomware Group"; flow:to_server, stateless; tls_sni; content:"sendbig.com"; nocase; pcre:"/(^|\.)sendbig\.com$/"; metadata:created_at 2023_08_18, updated_at 2025_09_16; sid:3300639; rev:8; classtype:bad-unknown;)

Metadata

created at2023_08_18
updated at2025_09_16

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!