Russia’s secret hacker school: training gru operatives in bauman university
Bauman Moscow State Technical University, a cornerstone of Russia’s scientific prowess, harbors a clandestine operation within its walls: Department 4, or ‘Special Training’. This secretive faculty is quietly molding a new generation of intelligence operatives for Russia’s military intelligence directorate, the GRU, equipping them with the skills to conduct cyber warfare, election interference, and espionage on a global scale.
A pipeline of spies: from classroom to covert operations
Documents obtained by a consortium of journalists reveal a meticulously crafted program where students are scouted from schools, funnelled into Bauman, and then seamlessly integrated into the GRU. A former senior Russian defence official described it as “part of a pipeline,” highlighting the university’s pivotal role in supplying the intelligence agency with highly skilled personnel.
Putin’s visit last April, ostensibly to showcase Moscow’s ambitions in space exploration, conspicuously overlooked this hidden element of the university’s operations. The focus wasn’t on lunar landings, but on training a cadre of digital assassins – a disturbing testament to Russia’s strategic priorities.

The curriculum: a masterclass in deception and disinformation
Department 4’s curriculum is a chilling blend of technical expertise and psychological manipulation. Students are immersed in the art of deception, learning to disguise surveillance equipment – a smoke detector functioning as a camera, a keystroke logger hidden within a computer cable, and a screenshot machine concealed within a monitor. The materials saturate them with Kremlin propaganda, justifying the invasion of Ukraine as “inevitable” and painting a narrative of ‘genocide’ against Russian speakers in the Donbas.

From ‘defence against technical reconnaissance’ to sandworm
The training goes far beyond basic hacking. Students are taught advanced techniques, including password attacks, software vulnerabilities, and the creation of custom computer viruses. They dissect the structure and organization of Western intelligence agencies – the CIA, the NSA, MI6 – and even delve into the tactics employed by notorious groups like Fancy Bear. Among the graduates is Daniil Porshin, a former student who, after excelling in academics and football, was assigned to Fancy Bear, the same group indicted by the US Department of Justice for meddling in the 2016 presidential election.
His path culminated in a posting with Sandworm, a notorious GRU unit responsible for devastating cyberattacks on Ukraine’s power grid, French presidential campaigns, and the South Korean Winter Olympics. The documents demonstrate a clear progression – from lecture hall to the front lines of digital warfare.

A system of control: gru oversight and severely critical evaluations
The GRU exerts direct control over the recruitment and grading process, sending its own officers to conduct exams and approve candidates. Evaluations are often brutally frank, dismissing students lacking “understanding of how to carry out a remote network attack.” Despite this rigorous oversight, the program continues to churn out operatives, with 15 graduates from Porshin’s cohort immediately assigned to GRU units – including one stationed at Unit 74455 in Anapa, a seaside resort town housing Sandworm.
As Russia’s war in Ukraine intensifies, this clandestine training program underscores a troubling reality: the Kremlin is investing heavily in its cyber capabilities, utilizing institutions like Bauman to cultivate a generation of digital spies, ready to destabilize Western democracies and advance Moscow’s strategic goals. The next cohort of trainees won’t graduate until 2027, ensuring a continued stream of skilled operatives for years to come.
