In the final stage, sensitive data is exfiltrated out of the network using encrypted channels, completing the espionage operation. The attacker utilized encrypted HTTPS traffic to transfer data to a command and control server.