Russian Cyber Command

Russian Cyber Command, also known as Rucyborg, operates as a hacktivist group based in Russia. Its activities primarily involve conducting cyber intrusions and data exfiltration operations against targets perceived to be linked to Russian governmental or industrial interests. The group has been described as focusing on exposing sensitive information through unauthorized access to computer systems. While its exact mission statement is not publicly documented, observed behavior indicates a pattern of politically motivated cyber attacks.

In March 2014, Rucyborg breached the personal computer of the president of the Russian Industrial Investment Fund, exfiltrating approximately 1,400 files including spreadsheets, presentations and videos that together exceeded 900 megabytes. The leaked material was claimed to reveal details of the fund's business operations and shadow banking activities, and included the president's identification card. Prior to this incident, the group had carried out similar attacks against other Russian entities associated with government interests, specifically a security firm and a defense export company. Additionally, distributed denial‑of‑service attacks that disrupted several government websites occurred around the same time, although no direct link to Rucyborg was established for those disruptions. These actions illustrate the group's capability to combine data theft with potential service disruption tactics.

The organisation's headquarters is located in Russia, and it operates under the aliases Russian Cyber Command and Rucyborg. No publicly available sources disclose its ownership structure, parent company, or subsidiary relationships. Consequently, any description of its organisational hierarchy remains unspecified in the open record.