### Summary
The Donot Team utilizes infected applications to move laterally across the network, accessing sensitive data stored on various devices.

### Exfiltration Process
- **Data Collection**: Sensitive information, including government documents and personal data, is aggregated.
- **Transmission**: Data is covertly transmitted to remote servers controlled by the attackers using encrypted channels.

### Countermeasures
- Monitor network traffic for unusual patterns indicative of lateral movement.
- Deploy network segmentation to limit the spread of infections.