Russian University Leak Exposes GRU Cyber Training Pipeline Behind APT28 and Sandworm

Cybersecuritynews •Tushar Subhra Dutta • August 28, 2026

Leaked university records have opened an unusual window into Russia’s military cyber ecosystem. The documents point to a structured training program, not a newly discovered piece of malware, that appears to feed people into GRU units associated with APT28 and Sandworm. The finding matters because these groups have been linked to espionage, credential theft, sabotage, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Leaked Files Expose Russian Cyber Training for Military Operations Leaked documents reveal a structured training pipeline at Bauman Moscow State Technical University, aimed at preparing students for military cyber operations. The records indicate that graduates are funneled into GRU units linked to notorious hacking groups APT28 and Sandworm, known for espionage and sabotage activities. This revelation highlights the systematic approach Russia employs in developing cyber capabilities for military purposes. The scope of the impact is significant, as it reveals the depth of state-sponsored cyber training and its implications for global cybersecurity. The current status is ongoing scrutiny of Russian military cyber operations and potential responses from international cybersecurity agencies. 5 sources 74

Russian University Leak Exposes GRU Cyber Training Pipeline Behind APT28 and Sandworm

The full story

Extracted Entities

APT Groups (2)

Countries (1)