Researchers observed APT29 using phishing emails in order to target German political parties with a new backdoor variant in late February.