Efosteal, can communicate with attackers via Telegram. It packages stolen info into a ZIP file that it sends to malicious domains via POST. It can vanish without a trace by deleting itself and the files it writes data to.

REFERENCE:
https://twitter.com/wdsecurity/status/1105992405629583362