In August 2015, cybersecurity firm Trend Micro attributed a cyberattack on the communication servers of Finland’s largest media group Sanoma to the Russian military intelligence agency (GRU)-connected hacking group known as Fancy Bear, or APT28. The same attack attempted to compromise the email account of Finnish investigative journalist Veli-Pekka Kivimäki, a member of Bellingcat who was investigating the conflict in Ukraine.