2,000 Leaked Documents Reveal How Russia Turns Engineering Students Into GRU Cyber Operators
Leaked Bauman Moscow State Technical University files reveal a hidden GRU training pipeline feeding APT28 and Sandworm units.
62
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenAug 12, 2026
- Last mentionedSep 3, 2026
Timeline
3 articles · newest firstSandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands
CERT-UA says Sandworm-linked UAC-0145 poses as recruiters in fake job interviews to deliver a trojanized WireGuard VPN that runs attacker commands on victims' hosts.
72
Lazarus hackers pair fake job offers with Windows zero-day exploit
Lazarus' Operation Dream Job targets the defense sector with fake job offers, a Windows LPE zero-day (CVE-2026-68820), and new Troy and RelayShell backdoors.
82
Related CVEs
by mentions- CVE-2025-4911399%8.8Authenticated PHP Object Deserialization RCE in Roundcube Webmail
- CVE-2026-68820<1%7.0Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
Appears with
- Sandwormthreat actor · 3
- GRUorganization · 2
- CERT-UAvendor · 2
- CERT-UAorganization · 2
- UAC-0145threat actor · 2
- Le Mondeorganization · 1
- DomainToolsvendor · 1
- Military Unit 29155organization · 1
- Der Spiegelorganization · 1
- Enveilorganization · 1
- SopraVPNproduct · 1
- ESETorganization · 1
- Telegramproduct · 1
- The Guardianorganization · 1
- Windowsproduct · 1
- Military Unit 74455organization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.