Network traffic monitoring has detected significant spikes in outbound traffic correlating with known exfiltration patterns. The traffic appears to be directed towards an external IP address associated with previous malicious activity. The group is potentially attempting to cover their tracks while exfiltrating remaining valuable information.