Before launching a full-scale encryption attack, Ragnar Locker exfiltrates valuable data through encrypted channels, ensuring a dual impact by transmitting confidential gaming data. This step involves the transfer of sensitive files from the internal network to an external malicious server.