The GRU targeted the Dutch Safety Board according to a Trend Micro alert on “Operation Pawn Storm” attack on MH17 investigation team. The operation used a server set up September 28, 2015. Then the GRU set up a fake VPN server on October 14, 2015.