The attackers successfully exfiltrated a portion of the funds, transferring them to accounts in the Philippines for laundering. Indicators of compromise include suspicious international bank transfer activities and known malicious IP addresses linked to the Lazarus Group.