Sandworm / GRU Unit 74455 — Bauman pipeline disclosure

Current state: investigative disclosure of significance rather than a tactical campaign development. The six-publisher consortium (The Insider, The Guardian, Le Monde, Der Spiegel, VSquare, Frontstory) published 2 000+ leaked internal documents on 2026-05-07 from Bauman Moscow State Technical University detailing a structured GRU recruitment-and-training pipeline operating as "Department No. 4 — Special Training" — placing 10–15 graduates per year into Russian military intelligence units. Documents explicitly link graduates to GRU Unit 74455 (Sandworm / VoodooBear: 2015–16 Ukraine power-grid attacks; 2017 NotPetya; 2023 Kyivstar) and to APT28 (Fancy Bear: 2016 Bundestag, 2017 Macron campaign). Operational relevance for EU defenders: the curriculum targets Western and US-DoD network topologies by name, reframing the long-running attribution debate — GRU cyber units are not ad-hoc-recruited contractors, they are graduates of a structured technical-intelligence training stream with measurable annual throughput. Outstanding question: whether the disclosed Bauman-graduate roster materially advances ongoing law-enforcement actions against named GRU operators.