Exfiltration

CollectionStart here

The attack stage where an adversary gathers the data they intend to steal, staging files, capturing keystrokes, or pulling from databases and email, before exfiltrating it. It is the step between finding valuable data and removing it.

Data Collection

The attacker activity of gathering targeted data within a compromised environment in preparation for theft, identifying, accessing, and staging files, records, or communications before exfiltrating them.

Double Extortion

A ransomware tactic where attackers both encrypt a victim's data and steal a copy, then threaten to leak it publicly, so paying only for decryption is not enough to prevent exposure. It pressures victims even if they have backups.

Dwell Time