In France, Google IT experts found evidence of the intervention of two groups of Russian hackers in the election campaign of Emmanuel Macron. It is reported by Le Monde.
According to the newspaper, the attack of Russian cyber pirates at Macron’s headquarters was carried out in 2017, a few months before the start of the elections in France, while the accident became known in May of that year. As a result of the attackers' actions, the content of the two letters became public immediately before the second round of the presidential election. In total, 9 gigabytes of various documents from Macron's headquarters mail spreaded on the Internet. Later, WikiLeaks published another array of letters (about 21 000 documents) related to the Macron campaign. The scandal was called "MacronLeaks".
A group of hackers associated with Russian intelligence. We are talking about the groups APT28 (also known as Fancy Bear) and Sandworm. According to Google, the AP28 group sent out phishing emails to steal the credentials of Macron’s relatives. Sandworm focused on the party members of the future French president. The goal of the hackers was to destabilize the presidential election.
The American FireEye IT company also revealed the details of the hack. Its analysis was published in 2018 in a document that was also partially presented in the books of journalist Andy Greenberg -'Sand Worm: A New Era of Cyber War' and 'Hunting the Kremlin’s Most Dangerous Hackers'.