Andariel allegedly included NASA-OIG among follow-on government targets in a broader North Korean operation funded by laundered ransom payments from Maui ransomware attacks against healthcare organizations. The indictment said the actors exploited unpatched known vulnerabilities, including Log4Shell, and stole sensitive data across multiple targets, including U.S. government employee information.