Attribution is to UNC2452 and not Cozy Bear, although there are certain shared characteristics making the source region clear.