Leaked records from Bauman Moscow State Technical University's Department No. 4 reveal a long-term Russian military intelligence and cyber operations training pipeline connected to the GRU. This department trained about 250 career and reserve students across three specialties: Special Intelligence Service (VUS 093400), operational information-technical effects (VUS 141600), and information-technology protection (VUS 751100). The curriculum combined offensive and defensive cyber warfare, technical intelligence, and information operations. Graduates were placed in military units and academies in multiple locations and linked to GRU cyber units Military Unit 26165 (APT28/Fancy Bear) and Military Unit 74455 (Sandworm/APT44). Senior GRU officers, including former Unit 26165 commander Viktor Netyksho, oversaw teaching and student evaluation. Leak distribution traced to a DarkForums account 'Losyash.' Metadata analysis of over 1600 files corroborates their origin from Bauman University. The leak includes personnel rosters, course materials, curricula, malware and cyber threat intelligence research, force-planning documents, and placement records. Department No. 4 serves multiple Russian General Staff directorates, training officers for intelligence collection, cyber offense/defense, and secure communications. Specialized tracks include financial sector cybersecurity under Special Intelligence. The program integrates classroom instruction with cyber range exercises and military unit internships, producing a broad workforce capable of integrating cyber operations into military planning and intelligence activities. The leak provides unique insight into the institutionalized production of Russian military cyber personnel aligned with the GRU.

Leaked records from Bauman Moscow State Technical University's Department No. 4 reveal a long-term Russian military intelligence and cyber operations training pipeline connected to the GRU. This department trained about 250 career and reserve students across three specialties: Special Intelligence Service (VUS 093400), operational information-technical effects (VUS 141600), and information-technology protection (VUS 751100). The curriculum combined offensive and defensive cyber warfare, technical intelligence, and information operations. Graduates were placed in military units and academies in multiple locations and linked to GRU cyber units Military Unit 26165 (APT28/Fancy Bear) and Military Unit 74455 (Sandworm/APT44). Senior GRU officers, including former Unit 26165 commander Viktor Netyksho, oversaw teaching and student evaluation. Leak distribution traced to a DarkForums account 'Losyash.' Metadata analysis of over 1600 files corroborates their origin from Bauman University. The leak includes personnel rosters, course materials, curricula, malware and cyber threat intelligence research, force-planning documents, and placement records. Department No. 4 serves multiple Russian General Staff directorates, training officers for intelligence collection, cyber offense/defense, and secure communications. Specialized tracks include financial sector cybersecurity under Special Intelligence. The program integrates classroom instruction with cyber range exercises and military unit internships, producing a broad workforce capable of integrating cyber operations into military planning and intelligence activities. The leak provides unique insight into the institutionalized production of Russian military cyber personnel aligned with the GRU.