An exfiltration attempt was detected where classified project files were being transferred to a known malicious remote server. The attack was executed by a threat actor using advanced techniques indicative of the Lazarus Group.