DNS Query to MEGA Cloud Storage

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•26

Detects DNS queries for subdomains related to the MEGA cloud storage service. This activity can indicate data exfiltration to cloud storage, potentially using tools like Rclone.