Large Outbound HTTPS Transfer to Mega.nz/Mega.io Endpoint - Possible Data Exfiltration

Duo Tech@duotech

•updated Aug 11, 2026•1•0•10

Detects large-volume outbound TLS transfers scoped to mega.nz/mega.io SNI/destination, tuned against a typical daily-use baseline so routine small file-sharing does not trigger, consistent with Gunra's confirmed exfiltration of up to tens of terabytes to Mega.