Finnish security firm F-Secure says MiniDuke may be sponsored by the Russian Federation. The group has developed an entire portfolio of sophisticated infostealing malware (with variants) over the past seven years. Researchers say they are unable to conclusively prove responsibility of any specific country for the Dukes. The authors of the malware also appeared to work primarily between the hours of 9 a.m. to 7 p.m., Moscow time. The targets are all of interest to Russian foreign policy, the researchers say.”]
Source: https://www.darkreading.com/analytics/miniduke-cosmicduke-apt-group-likely-sponsored-by-russia