In the final stage of the operation, the exfiltration of sensitive government data was detected over encrypted channels. The activity aligns with the NetTraveler APT group, indicating a sophisticated espionage effort.