Andariel allegedly targeted a California defense company in follow-on intrusions funded by ransom payments from Maui ransomware attacks against U.S. healthcare organizations. Prosecutors said the actors exploited unpatched known vulnerabilities, including Log4Shell, and stole sensitive data across defense, government, technology, manufacturing, and energy targets, including military aircraft-related technical information and intellectual property.