Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: GravityRAT steals files based on an extension list if a USB drive is connected to the system.