Cozy Bear, aka CozyDuke or APT 29, has been spotted lurching into action again. The group that hacked the Democratic National Committee is believed to be operating from Russia. The latest volley of emails came from Gmail accounts created by the attackers, using what appears to have been compromised email accounts belonging to individuals within Harvard University’s Faculty of Arts and Sciences. Two of the messages pretended to be forwarded from the Clinton Foundation, known as the Bill, Hillary & Chelsea Clinton Foundation.”]
Source: https://www.inforisktoday.com/blogs/cozy-bear-lurches-into-post-election-apt-attack-action-p-2319