A systems administrator is reviewing the VPN logs and notices that during non-working hours a user is accessing the company file server and information is being transferred to a suspicious IP address. Which of the following threats is most likely occurring?

Data exfiltration is the unauthorized transfer of data from a computer or network. In this scenario, a user accessing the company file server during non-working hours and transferring information to a suspicious IP address strongly indicates data exfiltration. The intent is to steal sensitive information. Typosquatting involves registering domain names similar to legitimate ones to trick users, which is unrelated to the described activity. Root or trust is not a recognized threat in this context; "root of trust" refers to a foundational component in a security system. Blackmail involves coercing someone through threats, typically after data has been exfiltrated or compromised, but the act of transferring data itself is exfiltration.