Salt Typhoon has initiated the exfiltration of sensitive wiretap communications using a known malicious external IP address. This activity is consistent with their objective to deliver intelligence to their sponsors.