The Elderwood group used zero-day exploits to breach various companies. They studied components used in specific weapons/tanks to figure out companies supplying those parts or software, and then targeted third-party suppliers of top-tier defense companies in their cyber attacks.