On September 29, 2016, the GRU then setup a fake Outlook Web Access server aimed to target an “important partner” to the investigation (see: Bellingcat).
