Exposing Data Exfiltration | Huntress

T1Covered by 1 source · first reported by Huntress at 19 Aug 2025, 14:00 UTC

Threat actors often steal data during the course of their attacks. This is particularly true for ransomware threat actors, who do it before deploying file encryption in order to engage in “double extortion” activities. This activity can be difficult to detect, particularly if it’s not dissimilar to…