the report says they then targeted the german konrad adenauer foundation and friedrich ebert foundation, groups that are associated with angela merkel's christian democratic union and opposition social democratic party, respectively. fancy bear set up fake email servers in late 2016 to send phishing emails with links to malware.