Keylogger and Mouse Logger: the malware agent can capture each keystroke, mouse movement and click that the target user makes.
Encryption: Collected data is usually encrypted at the time of capture and may be transmitted live or stored for later exfiltration.