French broadcaster TV5Monde hacked in April 2015, knocking 12 of its channels offline for 18 hours. Social media channels run by the broadcaster were hijacked and used to spew jihadist propaganda. Attackers’ use of English was a red flag for the incident response team, especially because all other Active Directory admin-level accounts were named in French. Investigators concluded that the attackers’ goal, from the beginning, was to sabotage the network. The attack appeared to have been launched by the group known as Fancy Bear, known as APT28.”]
Source: https://www.govinfosecurity.com/french-officials-detail-fancy-bear-hack-tv5monde-a-9983