An Oregon defense company was among the defense-sector targets cited in the U.S. indictment of a North Korean Andariel operator and co-conspirators tied to Maui ransomware-funded intrusion infrastructure. The broader campaign allegedly exploited unpatched known vulnerabilities, including Log4Shell, and stole sensitive data from defense, technology, government, energy, and manufacturing targets.