Organization

Military Unit 74455

0 mentions in 7 days · 2 in 30 days · 2 total · first seen Sep 1, 2026 · last 12d ago

Timeline2 articles

2,000 Leaked Documents Reveal How Russia Turns Engineering Students Into GRU Cyber Operators

Leaked Bauman Moscow State Technical University files reveal a hidden GRU training pipeline feeding APT28 and Sandworm units.

More than 2,000 leaked Bauman Moscow State Technical University documents show that Department No. 4, a hidden program inside the Military Training Center, trained roughly 250 career and reserve students for GRU cyber and intelligence roles across six academic years. Graduates were linked to Military Unit 26165 (APT28), Unit 74455 (Sandworm/APT44) and Unit 29155, and former Unit 26165 commander Viktor Netyksho was involved in department oversight. Reporting by The Insider, The Guardian, Le Monde, Der Spiegel and other outlets, with independent analysis by DomainTools, estimates 10-15 students annually were selected for GRU-related assignments before graduating.

Security AffairsSep 3, 08:12 UTC · 12d agoThreat actor1

Leaked Russian Cyber-Operations Training Materials

Leaked Bauman university records reveal a formalized Russian pipeline training GRU cyber personnel, linking a graduate to Sandworm's Military Unit 74455.

Leaked training materials from Bauman university describe a force-generation mechanism feeding graduates into General Staff components, including the GRU and directorates responsible for protected communications, cryptography and information security. A 2024 graduate of Department No. 4, Aleksei Kondrashov, was linked to Military Unit 74455, the GRU unit known as Sandworm, which conducted destructive attacks including the 2017 NotPetya attack. Researchers say the leak shows Russian cyber capability is institutionally sustained through recruitment pipelines beyond the familiar APT28 and Sandworm brand names.

Schneier on SecuritySep 1, 16:29 UTC · 14d agoThreat actor

Appears with

threat actor APT28 2 threat actor Sandworm 2 organization Bauman Moscow State Technical University 2 organization GRU 2 malware NotPetya 1 organization The Insider 1 organization Der Spiegel 1 vendor DomainTools 1 organization Le Monde 1 organization Military Unit 26165 1 organization Military Unit 29155 1 threat actor APT44 1 threat actor Fancy Bear 1 organization The Guardian 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.