The highly advanced Regin malware hides stolen data in the extended attributes section within a packet, while communicating back to hackers both directly and through a central hub, making it difficult to detect for years.