Oregon Defense Company · 2022-04
An Oregon defense company was among the defense-sector targets cited in the U.S. indictment of a North Korean Andariel operator and co-conspirators tied to Maui ransomware-funded intrusion infrastructure. The broader campaign allegedly exploited unpatched known vulnerabilities, including Log4Shell, and stole sensitive data from defense, technology, government, energy, and manufacturing targets.
Intrusion into "Oregon Defense Company"; exfiltration of maritime and uranium processing information · Beginning in or around April 2022
Beginning in or around April 2022, Conspirators gained and retained unauthorized access for over one month to the Oregon Defense Company's computer system ... and extracted over three terabytes of compressed unclassified information. The unclassified information exfiltrated from the Oregon Defense Company included limited technical information pertaining to maritime and uranium processing projects. [Case No. 2:24-cr-20061, U.S. District Court for the District of Kansas; filing: INDICTMENT filed against Rim Jong Hyok as to counts 1, 2.]