Free tools Windows power users keep installed
One-click scans. No signup required.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
The claim that leaked files link Russian research institute SpetzVuzAvtomatika to a Kremlin cyberwarfare project is unverified. The only source making that exact allegation is an October 2, 2026 Reddit post; no independent forensic release or reputable newsroom report confirming it was identified. A separate leak from Bauman Moscow State Technical University documents a Russian military-intelligence training pipeline, but it does not verify the SpetzVuzAvtomatika claim.
What the SpetzVuzAvtomatika claim says—and what is known
The October 2, 2026 Reddit post alleges that internal documents from SpetzVuzAvtomatika, described in the post as a Russian cyber research and development center, show projects supporting state-sanctioned hacking. That is an allegation, not an independently established finding. The available information does not verify the documents’ authenticity, identify a specific Kremlin project, or connect the institute to a named operation or hacking unit.
Accordingly, the evidence does not currently establish that SpetzVuzAvtomatika is connected to the Kremlin or the GRU. It would be inaccurate to say that the alleged leak proves either connection.
Recommended Free Tools
How the allegation compares with the separate Bauman leak
There is stronger reporting on a different set of materials from Bauman Moscow State Technical University. DomainTools Investigations analyzed a collection of about 1,600 files and said their metadata, user accounts, folder structure, and institutional records linked them to Bauman systems. The Guardian reported that an international journalism consortium obtained more than 2,000 Bauman documents spanning several years through 2025. These accounts do not establish that the files were identical collections, so the two counts should be attributed to their respective reports rather than treated as competing totals for one confirmed archive.
#1 Best Overall
| Evidence axis | SpetzVuzAvtomatika allegation | Bauman documents |
|---|---|---|
| Source provenance | An October 2, 2026 Reddit post; document authenticity is not independently established. | DomainTools tied about 1,600 files to Bauman systems using metadata, users, folder hierarchies, and institutional records; The Guardian consortium reported obtaining more than 2,000 documents. |
| Independent corroboration | No independent forensic release or reputable newsroom confirmation was identified. | Analyzed by DomainTools and reported by The Guardian and its international journalism consortium. |
| Institutional identity | Described by the Reddit post as a Russian cyber research and development center; that description and its alleged role are not independently verified here. | Bauman Moscow State Technical University materials describe Department No. 4, a concealed military-training unit. |
| Named agencies or units | No specific agency or operational unit is independently established. | The Guardian reported GRU involvement in recruitment, grading, candidate approval, and placements, and links to Unit 26165 and Unit 74455. |
| What the material supports | The allegation itself; not proof of a Kremlin project or a specific cyber operation. | A documented training and placement pipeline for cyber, intelligence, and information-related roles; not proof that every student or named person took part in an attack. |
What the Bauman material documents
A concealed military-training department
DomainTools describes Bauman Department No. 4 as a military-training unit with three specialties: special intelligence; information-technical effects and protection; and information-technology protection. The Guardian reported that the consortium’s files included syllabuses, exams, staff contracts, and graduate assignments, and indicated a route from university training into GRU-linked cyber units.
The Guardian reported that GRU officers controlled recruitment, grading, candidate approval, and placements. It named links to Unit 26165, associated with Fancy Bear, and Unit 74455, associated with Sandworm. Those findings concern the Bauman material; they do not identify either unit in the SpetzVuzAvtomatika allegation.
Training covered offensive and defensive work
DomainTools reported instruction spanning password attacks, server exploitation, software vulnerabilities, malware creation, penetration testing, intrusion detection, technical surveillance, and propaganda or information manipulation. The mix suggests a curriculum concerned with both conducting and detecting intrusions, as well as broader information effects. It does not establish that a particular class or graduate carried out a particular operation.
DomainTools translated Bauman instructional material as defining information-technical weapons as tools and methods that can alter, destroy, distort, copy, or block information; overcome protections; restrict legitimate access; conduct disinformation; and disrupt information-processing systems and infrastructure. This is a definition in the Bauman training material, not evidence that every capability described was used in an actual attack.
Rank #3
What the reported numbers do—and do not—show
The figures below refer only to the Bauman case. They should not be attributed to SpetzVuzAvtomatika or to the unverified Reddit allegation.
| Figure | What the source reported |
|---|---|
| About 1,600 files | DomainTools Investigations’ 2026 analysis of files it linked to Bauman systems. |
| More than 2,000 documents | The Guardian consortium’s 2026 account of materials covering several years through 2025. |
| Roughly 250 students | DomainTools’ 2026 account of students across six university years; it also reported 86 new trainees planned for 2024. |
| 69 graduates; 15 placements | The Guardian reported that 69 students graduated from Department No. 4 in spring 2024 and 15 others from one cohort were directed into GRU units. |
| 144 course hours | The Guardian reported that a hacking-focused course ran for 144 hours across two semesters. |
These counts describe different aspects of the Bauman reporting. They illustrate the reported scale and structure of that university’s program; they do not confirm the authenticity, scale, or contents of files attributed to SpetzVuzAvtomatika.
Quick Recap
Best Value
What can be concluded
- On SpetzVuzAvtomatika: the reported Kremlin cyberwarfare connection remains an unverified social-media allegation.
- On the Bauman case: DomainTools’ analysis and The Guardian’s consortium reporting document a separate university-based training and placement pipeline with links to GRU units.
- On the broader claim: the Bauman material supports the existence of institutional training for cyber and information-related capabilities, but it cannot be used as proof that SpetzVuzAvtomatika ran a specific project or that any particular person conducted an attack.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problems
