Cyber security company CrowdStrike is the one that claims it has traced the DNC leaks to Russian hacking groups, one of which is lovingly titled Fancy Bear, codename APT 28. That same cooperative, with potential connections to the Russian military intelligence, has also used Android malware for its .
Article Link: http://www.phonearena.com/news/Fancy-Bear-Russian-hackers-used-Android-malware-to-track-Ukrainian-artillery-units_id89304