.@pwnallthethings Remarkably the same C2 IP actually is hardcoded in the DNC and BUNDESTAG APT28 samples. pic.twitter.com/xhTlHOtUpz

— Thomas Rid (@RidT) July 8, 2016