Leaked Russian Cyber-Operations Training Materials
Leaked Russian military documents detail training pipelines for cyber units inside the General Staff, including the GRU and the 8th Directorate. One identified graduate has been linked to Sandworm, the unit behind the 2017 NotPetya attack and destructive operations against Ukraine.
Why this matters: Leaked training records are rare. When they surface, they give researchers and governments something concrete: names, unit assignments, and institutional structure behind attacks that have caused billions in real-world damage. NotPetya did not just hit Ukraine — it spread globally and crippled companies that had nothing to do with the conflict. Knowing how Russia builds and rotates people through these units matters for attribution, sanctions, and defense. The caveat is important too: a graduate roster does not prove every person on it ran an attack.
Who should care: Cybersecurity · Privacy officers · Administrators
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.