value:  The group has the ability to read file contents, encrypt the information, and exfiltrate them to attacker controlled infrastructure separate from their C2 channel. 
name: Exfiltration Over Alternative Protocol: Exfiltration Over Symmetric Encrypted Non