The person at the center of this case
United States government officials, foreign affairs personnel, security researchers, and nuclear energy researchers (victims of spear phishing campaign)
Cold Case · Open
2 years waiting · since 2023
ANDREY STANISLAVOVICH KORINETS
Justice for United States government officials, foreign affairs personnel, security researchers, and nuclear energy researchers (victims of spear phishing campaign) — the trail went cold in 2023, but the truth hasn't.
Start here
Key leads to think about
🎯
suspect
Lead #1What is Korinets' current location and how is he evading international law enforcement?
🔍
evidence
Lead #2What specific spear phishing techniques and infrastructure were used in the campaign?
👤
person
Lead #3What is the full scope of Korinets' role within the FSB's Callisto Group operational unit?
Andrey Stanislavovich Korinets, a Russian national allegedly affiliated with the FSB's Callisto Group, is wanted for his role in a sophisticated spear phishing campaign targeting U.S. officials and researchers. The conspiracy aimed to steal email credentials and intelligence related to defense, foreign affairs, security policies, and nuclear energy research. A federal grand jury in San Francisco indicted Korinets on December 5, 2023, and he remains at large, making his apprehension critical to disrupting ongoing cyber threats to national security.
Case
#1152
United States (targeting operations)
United States District Court, Northern District of California, San Francisco Division; Federal Bureau of Investigation
Try asking
Claim this imported case
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
10 uploads25 AI questions/day
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
More leads to consider
Beyond the top three above — each detail below could be the thread that pulls this case open.
💡
clue
Lead #4What intelligence was successfully obtained through the spear phishing campaign and what damage to U.S. security resulted?
Have information about any of these leads?
Even the smallest detail could be the key to solving this case.
Official wording
Source Narrative
Conspiracy to Commit Computer Fraud and Abuse; Forfeiture Allegation Caution: Andrey Stanislavovich Korinets and his co-conspirator Ruslan Aleksandrovich Peretyatko are wanted for their alleged involvement in a spear phishing campaign in the United States that was specifically designed to gain unauthorized access to the email account credentials of their targeted victims in order to gather valuable intelligence related to United States defense, foreign affairs, security policies, and nuclear energy related research and development. On December 5, 2023, a grand jury, sitting in the United States District Court, Northern District of California, San Francisco Division, indicted the two men on charges of Conspiracy to Commit Computer Fraud and Abuse, and Forfeiture Allegation.
Remarks: Korinets is a Russian national with known affiliations to a discrete operational unit within the FSB known by cybersecurity investigators as the “Callisto Group”.
Timeline of Events
🕵️
2023-12-05
Federal Grand Jury Indictment
Andrey Stanislavovich Korinets and Ruslan Aleksandrovich Peretyatko indicted on charges of Conspiracy to Commit Computer Fraud and Abuse, and Forfeiture Allegation by a grand jury in the United States District Court, Northern District of California, San Francisco Division.
Case Information
Incident:December 5, 2023
Last Updated:May 14, 2026
Leave a comment
Comments
Case Information
Incident:December 5, 2023
Last Updated:May 14, 2026