The person at the center of this case
United States government agencies, defense contractors, and nuclear energy researchers
Cold Case · Open
2 years waiting · since 2023
ANDREY STANISLAVOVICH KORINETS
Justice for United States government agencies, defense contractors, and nuclear energy researchers — the trail went cold in 2023, but the truth hasn't.
Start here
Key leads to think about
🎯
suspect
Lead #1What is Korinets' current location and how is he connected to the FSB's Callisto Group operational unit?
🔍
evidence
Lead #2What specific defense and nuclear energy research credentials were successfully compromised in the spear phishing campaign?
👤
person
Lead #3Who were the primary targets of the phishing campaign and what sensitive information did they have access to?
Andrey Stanislavovich Korinets, a Russian national affiliated with the FSB's Callisto Group, is wanted for leading a spear phishing campaign targeting U.S. officials and researchers to steal credentials and intelligence on defense, foreign affairs, and nuclear energy programs. On December 5, 2023, a federal grand jury in San Francisco indicted Korinets and co-conspirator Ruslan Aleksandrovich Peretyatko on charges of conspiracy to commit computer fraud and abuse. The case remains active as authorities seek to locate and apprehend Korinets, who is believed to be outside U.S. jurisdiction.
Case
#1152
United States (targeting)
United States District Court, Northern District of California, San Francisco Division; Federal Bureau of Investigation
Try asking
Claim this imported case
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
10 uploads25 AI questions/day
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
More leads to consider
Beyond the top three above — each detail below could be the thread that pulls this case open.
💡
clue
Lead #4What infrastructure and tools were used to conduct the spear phishing attacks and can they be traced to other operations?
Have information about any of these leads?
Even the smallest detail could be the key to solving this case.
Official wording
Source Narrative
Conspiracy to Commit Computer Fraud and Abuse; Forfeiture Allegation Caution: Andrey Stanislavovich Korinets and his co-conspirator Ruslan Aleksandrovich Peretyatko are wanted for their alleged involvement in a spear phishing campaign in the United States that was specifically designed to gain unauthorized access to the email account credentials of their targeted victims in order to gather valuable intelligence related to United States defense, foreign affairs, security policies, and nuclear energy related research and development. On December 5, 2023, a grand jury, sitting in the United States District Court, Northern District of California, San Francisco Division, indicted the two men on charges of Conspiracy to Commit Computer Fraud and Abuse, and Forfeiture Allegation.
Remarks: Korinets is a Russian national with known affiliations to a discrete operational unit within the FSB known by cybersecurity investigators as the “Callisto Group”.
Timeline of Events
🕵️
2023-12-05
Federal Grand Jury Indictment
Andrey Stanislavovich Korinets and Ruslan Aleksandrovich Peretyatko indicted on charges of Conspiracy to Commit Computer Fraud and Abuse and Forfeiture Allegation by a grand jury in the United States District Court, Northern District of California, San Francisco Division.
Case Information
Incident:December 5, 2023
Last Updated:September 10, 2026
Leave a comment
Comments
Case Information
Incident:December 5, 2023
Last Updated:September 10, 2026