## Data Harvesting and Exfiltration

**Overview:**
Threat actors are actively harvesting sensitive data from compromised systems, preparing for exfiltration to external servers.

**Key Findings:**
- Large volumes of data being compressed and staged for transfer.
- Use of encrypted channels to conceal data movement from detection.
- Targeted data includes intellectual property and user credentials.

**Recommendations:**
- Monitor outbound traffic for anomalies and block unauthorized data transfers.
- Implement data loss prevention (DLP) solutions to identify and protect sensitive data.

**Next Steps:**
Determine the specific targets based on MAC addresses to understand threat actor intentions.