question about exfiltrating big data on hacked companies

[Isa]

If you infect a machine of some company with malware, and you find 80 GBs worth of data you want to sell on the black market. How are you going to exfiltrate it without having the company's SOC see and prevent the upload?

 

[Prokhorenco]

From the compromises I've been apart of using rclone I've never had any issues. Find a server on the network that hasn't had logins in it's recent history and tunnel it out of that.