Duqu uses mock .jpg files along with other dummy files, all encrypted, to exfiltrate data.

FORBES: Son of Stuxnet

Is all data transmitted and stored encrypted?

FORBES: Is Your Data Safe In The Cloud?