The South Korean manufacturing intrusion was included in a U.S. Justice Department case charging Rim Jong Hyok and co-conspirators over an Andariel campaign tied to North Korea’s Reconnaissance General Bureau. The indictment alleged that proceeds from Maui ransomware extortion were laundered through China-based facilitators and used to lease infrastructure for further intrusions, including against South Korean manufacturing, defense, technology, government, and energy targets, with exploitation of known vulnerabilities such as Log4Shell and theft of sensitive data.