The US DoJ seized two domains used by APT29 group in recent attacks impersonating the U.S. USAID to spread malware. Russia-linked SVR group was involved in the Democratic National Committee hack and the wave of attacks aimed at the 2016 US Presidential Elections. The domains were used as part of the command and control infrastructure used by the cyberspies. The group allegedly compromised an account on the email marketing platform Constant Contact that belonged to US agency USAID. The hackers used the account to send out 3,000 phishing messages to more than 150 organizations across 24 countries.”]
Source: https://securityaffairs.co/wordpress/118495/apt/doj-seized-apt29-domains.html