### Summary
APT28 has initiated data exfiltration activities, transferring sensitive information to external servers.

### Details
- **Exfiltration Channels**: Data is being exfiltrated using the X-Tunnel backdoor, employing encrypted communications.
- **Targeted Data**: Emails, documents, and other sensitive files are the primary targets.

### Recommendations
- Implement data loss prevention (DLP) solutions to detect and block unauthorized data transfers.
- Conduct a comprehensive data breach impact assessment and notify affected parties as required.