According to the Czech foreign ministry the attacks aligned with the activity profile of the APT28 group, which is linked to Russian military intelligence services.