The BlackByte, ransomware-as-a-service (RaaS) group has added exfiltration of information from compromised sites as one of its services – adding another malicious function that less technical cyber-gangs can now access:
BlackByte ransomware affiliate also steals victims’ data • The Register
The malware agent called Exbyte, uploads the stolen information to the legitimate cloud data storage site, Mega – where large free accounts are available – the information probably does not stay there long!