the group targeted the dutch safety board, the body conducting the official investigation into the crash, before and after the release of the board's final report. they set up fake sftp and vpn servers to mimic the board's own servers, likely for the purpose of spearphishing usernames and passwords. a spokesman for the dsb said the attacks were not successful.