Ukrainian hacktivist team Cyber Resistance in cooperation with volunteers of InformNapalm international intelligence community conducted a CYBINT & OSINT operation to gain access to and analyze the e-mail correspondence of Russian Colonel Leonid Rusin. Until July 2022, Rusin was in command of the 610th Center for Combat Training and Retraining of Military Pilots (military unit 41520), Ivanovo city, Severny airfield. The A-50U airborne early warning and control (AEW&C) aircraft are based at this airfield. This Russian equivalent of AWACS is used by the Russian Federation to direct missile attacks on Ukraine. Since July 2022, he has been studying at the Military Academy of the General Staff of the Russian Army, apparently on the way to a promotion. 

The starting point for this operation was a tipoff from our friends and partners of the OSINT Bees team, who published an OSINT study indicating some personal data of Colonel Leonid Rusin and his wife Olga Rusina. The e-mail address rusinaon@mail.ru which appeared in their message served as an entry point for the hacking operation. The Cyber Resistance activists managed to get full access not only to Olga’s email account, but also to the mail box of her husband rusinleo@mail.ru as well as mail boxes of Rusin’s inner circle, including the officers with whom he conducted official correspondence. This resulted in a massive leak of flight crew lists and photos of other Russian officers, subordinate to Rusin. in this article, we are making public only a part of the available information. However, the bulk of the obtained data is already being used in the interests of intelligence and is producing meaningful results.

Colonel Rusin

Rusin Leonid Igorevich [Rus.: Русин Леонид Игоревич], born December 19, 1979, TIN 644004138190, Russian passport: #5303 827663.

Hacking into the email correspondence of Colonel Rusin made it possible to authenticate his current residence address in Moscow, which did not appear in any public databases and other open sources, as well as his phone number:

Moscow, 25 Vernadsky st., apt. 137. Phone number: +789128431964.
These data appear on the correspondence about receiving a book he needed to study at the Military Academy of the General Staff of the Russian Armed Forces.

This address also appears in the questionnaires filled out by Rusin’s wife.

The hack also yielded scanned copies of Rusin’s personal documents.

Rusin systematically reported on officers who violated the secrecy procedure in the unit. The funny thing is that he kept scanned copies of these reports in his personal mail box, which is also a violation of the secrecy procedure.

Interestingly, on September 17, 2022, Rusin was interrogated in the criminal case 12202000735000033 as a witness, where he changed his testimony, placing the blame on his subordinate officer.

Rusin’s account on the Russian state services web portal Gosuslugi shows traffic fines on an almost weekly basis.

Rusin’s hack made it possible to identify dozens more Russian military pilots, who diligently concealed their data and were very discreet on social networks.

For example, the crews of A-50U aircraft:

• RF-94268 tail Number 41 red, Taganrog
• RF-50610 tail Number 42 red

Below, is the list from internal documentation with the names of officers, crew members and their passport numbers:

• Oprya Viktor Viktorovich [Rus.: Опря Виктор Викторович], Russian passport #58 03 569720.
• Krasnopolsky Maxim Sergeyevich [Rus.: Краснопольский Максим Сергеевич], Russian passport #24 97 024395.
• Chelovechkov Igor Valentinovich [Rus.: Человечков Игорь Валентинович], Russian passport #24 14 744336.
• Cheskidov Konstantin Igorevich [Rus.: Ческидов Константин Игоревич], Russian passport #24 15 787198.
• Vorotynsky Eduard Frantsevich [Rus.: Воротынский Эдуард Францевич], Russian passport #24 12 618872.
• Yusov Dmitry Ivanovich [Rus.: Юсов Дмитрий Иванович], Russian passport #04 08 433917.
• Kablinov Maxim Borisovich [Rus.: Каблинов Максим Борисович], Russian passport #6304233105.
• Levchenko Vyacheslav Vladimirovich [Rus.: Левченко Вячеслав Владимирович], Russian passport #24 12 651955.
• Burlutsky Pavel Gennadievich [Rus.: Бурлуцкий Павел Геннадьевич], Russian passport #63 05 867771.
• Topchienko Sergey Alekseevich [Rus.: Топчиенко Сергей Алексеевич], Russian passport #24 17 895248.
• Chunosov Andrey Aleksandrovich [Rus.: Чуносов Андрей Александрович], Russian passport #24 16 817756.
• Rachachov Sergey Borisovich [Rus.: Рачачов Сергей Борисович], Russian passport #24 04 073561.

In total, the analysis of the documentation and photos of social events at the 610th Center for Combat Training and Retraining of Military Pilots (military unit 41520) resulted in identification of 41 Russian officers. See their data in the table.

Here is also the identity data of the Russian officers from the table as a list:

In addition to various documents, the mail box of Colonel Rusin contained photos with the officers of the unit liberally consuming alcohol at an internal party, as well as a photo of the so-called “spring ball” of officers with their wives. Below are some photos for your reference.

Conclusion

We went for a simple publication format, without a detailed description of Colonel Rusin’s documents, this time focusing on the identity data of the pilots participating in the aggression against Ukraine.

In terms of the scale of the personnel data leak, Colonel Rusin, the former commander of the 610th Center for Combat Training and Retraining of Military Pilots (military unit 41520), comes very close to Colonel Atroshchenko, the commander of the 960th Assault Aviation Regiment (military unit 75387). Both of these commanders became the sources of large-scale leaks of identifying documents of the most secretive group of Russian officers – members of the air crews directly implicated in committing war crimes, delivering air and missile strikes on civilian targets in Ukraine.

Read more publications based on the data from Cyber Resistance hacktivists

• Hacking a Russian war criminal, deputy commander of the OMON of the Krasnoyarsk Krai
• Hacking a Russian war criminal, commander of 960th Assault Aviation Regiment
• Hacking Russian Z-volunteer Mikhail Luchin who ordered sex toys for $25,000 instead of drones for the Russian army.
• BagdasarovLeaks: hacking ex-member of the Russian State Duma Semyon Bagdasarov. Iranian gambit
• Hacked: Russian GRU officer wanted by the FBI, leader of the hacker group APT 28
• Hacking “James Bond”: medical service commander of 960th Assault Aviation Regiment doxed key personnel of his own unit
• Hacking Andrey Lugovoy, member of the Russian State Duma, First Deputy Head of the Security Committee
• Ukrainian hacktivists acquired first-ever photo of the GRU hacker unit commander wanted by the FBI for meddling in the U.S. election
• New evidence of collaboration of former Slovak Justice Minister Štefan Harabin with the Russian Federation

Distribution and reprint with reference to the source is welcome! (Creative Commons – Attribution 4.0 International – CC BY 4.0) InformNapalm social media pages:  Facebook / Тwitter / Telegram / Slate (Sl8).

InformNapalm does not receive any financial support from any country’s government or large donors. Only community volunteers and our readers help us to maintain the site. You can become one of the community volunteers. Please support the development of InformNapalm, the unique volunteer intelligence resource, with donations through buymeacoffee.