Russia Uses Top Universities to Train GRU-Linked Cyber Operatives – Media

An international media investigation has revealed that Bauman Moscow State Technical University housed a secret GRU-linked department preparing students for cyber and intelligence operations, with some graduates allegedly ending up in units tied to Fancy Bear and Sandworm.

Russia’s use of elite universities to pipeline talent into its intelligence and cyber warfare apparatus is not new, but a recent investigation has put numbers to the scale of the effort. Jacek Raubo, director of the Defence24 Analysis Unit, discussed the findings with TVP World.

The investigation focused on Bauman Moscow State Technical University, one of Russia’s most prestigious engineering institutions. According to the reporting, the university housed a covert department with GRU ties whose curriculum covered hacking, espionage, and information warfare.

Some graduates are alleged to have moved directly into units associated with the hacking groups known as Fancy Bear and Sandworm, both linked by Western intelligence services to Russian military intelligence.

Cold War Logic, Modern Tools

Raubo was ruffled about the revelations. “Mostly, there is no surprise in that,” he said, noting that Soviet and Russian intelligence services have long used leading universities for recruitment and talent development. What has changed is the technology. Russia now needs highly skilled personnel for cyber operations, signals intelligence, electronic intelligence, and communications intelligence at a scale that requires institutionalised pipelines rather than ad hoc recruitment.

The investigation’s significance, in his view, is not that it exposed the method but that it revealed the breadth of the system.

The West’s Response

On whether Western countries have built offensive as well as defensive capabilities in cyberspace, Raubo said the picture is not straightforward. He acknowledged remaining gaps but pointed to substantial progress since 2016 in cyber defence, counterintelligence, and public-private cooperation. Russia, he noted, operates with a much higher tolerance for risk than Western democracies, which means direct imitation is neither practical nor appropriate.

The more effective path, Raubo argued, runs through transparency, intelligence sharing, technological investment, and allied coordination. Publicly attributing cyberattacks, sabotage, and disinformation campaigns to Russia is itself a strategic act, he said, because Moscow depends on obscuring its role while sowing uncertainty inside Western societies.

He also flagged a gap that remains underaddressed: the West has not developed a coherent offensive information strategy directed at Russian society. Digital channels alone are insufficient. “Psychological warfare is one of the main topics we need to discuss when we think about the long-term operation against the potential Russian mobilisation toward the West,” Raubo said. Television, he noted, remains far harder to reach inside Russia and has received comparatively little strategic attention.