Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Some variants of the Zeroaccess Trojan have been known to store data in Extended Attributes.