Wanting to cover the topic of Guccifer 2.0 properly does mean reporting on discoveries regardless of any narratives/attributions they may or may not support and certainly the latest discovery complicates matters a little with regards to attributions and provenance of sources.
Over the past 48 hours a few things have been brought to my attention, one of which demands an update from me and another that lends some credence to the notion of connections existing between whoever phished Podesta and DCLeaks.
Eagle-eyed researcher (and author of the Climate Audit blog) Stephen McIntyre, has spotted a few correlations with documents released by some parties (namely Guccifer 2.0 and DCLeaks) with attachments of emails later published by WikiLeaks.
First of all, we have Guccifer 2.0's June 30, 2016 batch of documents released, it appears there are 8 documents in that collection that match attachments to DNC emails. (To be clear on this: I had previously only mentioned the correlation with those released on July 6, 2016 so this earlier date is a critical update to what I had reported before).
However, far more troubling than this is the fact that it appears DCLeaks published documents (a collection of 72 documents featuring news clippings relating to Hillary Clinton) on June 8, 2016. McIntyre has found that these documents match with some of the attachments on the Podesta emails that were later published by WikiLeaks.
(While I have found references to DCLeaks for earlier dates, the earliest independently verifiable evidence I have of this specific content existing comes from the June 13, 2016 snapshot on archive.org that was taken the day after Assange's announcement confirmed that WikiLeaks were in posession of Clinton related emails).
If these earlier publication dates can be independently verified, it appears that DCLeaks published a batch of files that later appeared in Podesta's attachments and did so 4 days prior to Julian Assange's announcement.
This also fits in with other observations that McIntyre has made recently regarding identical syntax found in different phishing emails (with emails/content relating to other targets also ending up on DCLeaks).
14/ the spearphishing syntax of Podesta hack, as I've mentioned before, was identical to spearphishing syntax of Rinehart hack published at DCLeaks. So there's a direct connection between Podesta hack and DCLeaks as well as to Guccifer2.
— Stephen McIntyre (@ClimateAudit) July 24, 2018
It's certainly a point worthy of consideration and while it doesn't go in favor of what I may have stated suspicion of, I'm happy to report on it as it's good to show that new discoveries aren't always favorable to one side or work out advantageously for any one theory and the overlap with Podesta attachments is undeniably a new, verifiable and noteworthy correlation.