A prestigious Moscow university has been exposed as a key hub in Russia’s cyber warfare strategy, according to a major international investigation based on more than 2,000 leaked documents. The revelations suggest that Bauman Moscow State Technical University is not only educating engineers, but quietly preparing future hackers, spies and saboteurs for GRU operations.

The files, analysed by a consortium of journalists from Delfi Estonia, Der Spiegel, FRONTSTORY, The Guardian, The Insider, Le Monde, and VSquare describe a secretive “Department No. 4” that does not appear on official organisational charts. This covert unit reportedly channels top-performing students directly into military intelligence roles linked to cyberattacks, election interference and sabotage activities across Europe.

From top Russia’s students to intelligence operatives

Among those highlighted is Daniil Porshin, a standout engineering student who graduated in 2024. Alongside standard cybersecurity training, he reportedly studied offensive techniques such as password cracking, malware creation and server intrusion. Shortly after graduating, he joined GRU Unit 26165, widely known as “Fancy Bear,” a group accused of high-profile cyber operations targeting Western institutions.

Each year, around 10 to 15 students are pre-selected and assigned to GRU units even before completing their studies. Some are linked to notorious divisions such as Unit 74455, also known as “Sandworm,” which has been blamed for cyberattacks on Ukraine’s power grid and political interference abroad.

Courses in hacking, propaganda and surveillance

The leaked curriculum reveals a blend of technical expertise and psychological manipulation. Students are trained in exploiting vulnerabilities, launching distributed denial-of-service (DDoS) attacks, and deploying malware. Practical exercises include hacking test servers and simulating real-world cyber intrusions.

More strikingly, the programme also incorporates propaganda techniques and “experimental psychology.” Students learn how to craft manipulative social media content to influence public opinion, reflecting a broader strategy of information warfare.

The teaching materials also include very extreme Kremlin sentiments taught to students. One of these claim that the war in Ukraine was actually “inevitable”, and that there are only “nationalists and neo-Nazis” in charge in Kyiv, while Russians in the Donbas face “genocide” that is being backed by the West, especially European states.

Military links and international concerns

The programme is overseen by figures with direct ties to Russian intelligence. One key lecturer, Lieutenant Colonel Kirill Stupakov, is described in the documents as both an academic and an active GRU officer. Senior intelligence figures have also reportedly participated in evaluating students.

The findings come amid growing warnings from European officials. Countries such as Poland and Germany have reported rising cyber threats, while Sweden has accused Russia of carrying out persistent digital attacks against EU institutions.

Hungarian connection emerges

The investigation also uncovered a Hungarian link. One instructor, Dmitriy Velikorodnyy, was born in Budapest and is the son of a Soviet soldier once stationed in Hungary. Now a senior instructor, he specialises in defence against chemical, biological and nuclear threats, highlighting the programme’s broader military scope.

Experts say the revelations demonstrate the “militarisation of education” in Russia, where academic institutions play a direct role in preparing specialists for hybrid warfare. Graduates often move straight into intelligence roles, sometimes even adopting false identities for covert operations abroad.

Featured image: Anadolu/Syrian Presidency