Decoding Secrets Through Symbols: How Military Insignia Revealed Russia’s Hidden SIGINT Network

For over a year, CheckFirst researchers have systematically collected and analysed hundreds of photographs of Russian military insignia available on manufacturer websites, resale platforms, and specialised forums. What began as an exploration of “phaleristics” (the academic study of medals and military decorations) evolved into a comprehensive mapping of Russia’s signals intelligence (SIGINT) infrastructure.

Why This Matters

The FSB’s 16th Center inherited the KGB’s signals intelligence capabilities and is reportedly behind some of Russia’s most sophisticated cyber operations, including the Turla and Energetic Bear groups. Until now, its structure remained largely opaque to public scrutiny.

Our methodology, treating military memorabilia as structured data sources, demonstrates how unconventional OSINT techniques can penetrate even the most secretive organisations. From a badge depicting a facility in Sochi to insignia revealing the 1918 origins of Moscow’s oldest listening post, each piece contributed to an unprecedented picture of Russia’s intelligence infrastructure.

Methodology as Innovation

This investigation showcases how unconventional OSINT techniques can penetrate even the most opaque institutions. By treating military insignia not as mere memorabilia but as structured data sources, we’ve demonstrated that:

• Publicly available information, when systematically collected and analysed, can reveal sensitive intelligence structures
• Visual symbols contain encoded institutional knowledge that can be decoded through careful analysis
• Cross-referencing multiple sources—from forums to satellite imagery—can validate and expand initial findings

Implications and Future Directions

While our findings provide the most comprehensive public mapping of the 16th Center to date, they also highlight persistent knowledge gaps. The precise missions of individual departments and the full extent of the Center’s cyber operations remain unclear. Unit 28735 near Alushta, for instance, appears in official records but lacks corresponding insignia in our dataset.

This research opens new avenues for understanding intelligence structures globally. The methodology we’ve developed—combining phaleristics with traditional OSINT techniques—offers a scalable framework for examining security agencies worldwide, particularly where commemorative traditions provide unexpected transparency.

Download the full report to discover how we turned collectors’ items into intelligence gold.