Exactly. Typically, exfiltrating this kind of information is only the first step. Once enough high value targets are caught in this net, the actual malware is deployed.

Still, it's not nearly on the same level as exfiltrating secrets.