Angela Merkel's parliamentary office was also affected by the hacking attack on the Bundestag in 2015. This was the result of an investigation into the attack by the Federal Criminal Police Office (BKA), the Federal Office for Information Security (BSI) and private companies. After the attack, the Bundestag's IT system had to be set up again.
The experts could have partially reconstructed the attack. After that, the attackers would have had access to two email boxes, reports the Hamburg news magazine Der Spiegel in its current edition. It had been mailboxes from Merkel's MP's office, not those from the Chancellery.
The attackers in the area of the Russian military secret service GRU are said to have completely copied both mailboxes, that is, correspondence from 2012 to 2015. However, it is unclear to what extent the emails came into the possession of the GRU.
The federal prosecutor issued an arrest warrant
The federal prosecutor's office in Karlsruhe obtained an arrest warrant earlier this week. Dmitrij Sergejewitsch Badin is an intelligence officer and is considered a member of the Russian hacker group Fancy Bear, which is also known as APT28 and is assigned to the GRU.
Badin, whose code name was Scaramouche, is also being searched by the US Federal Bureau of Investigation (FBI). He is said to have hacked the Democratic Party's computer networks in the 2016 US election campaign and was involved in the hack by the World Anti-Doping Agency (Wada).
According to Spiegel, the German investigators monitored a server that the hackers used, among other things, for private purposes. They identified one of the users as Scaramouche. They revealed his real identity through a Gmail account that he used. The officers found private photos, personal correspondence, and documents named Badin.