Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025
Andariel compromises of U.S., ROK, UAE and Israeli IT and defense-related companies · January 2024 - September 2025 (reporting period)
(MSMT/2025/2, report p. 39) “During the reporting period, Andariel actors continued to compromise U.S., ROK, UAE, and Israeli companies, especially in information technology and defense-related sectors, to survey target networks for subsequent ransomware attacks and theft of proprietary data.”