Person

Andrey Stanislavovich Korinets

Sanctioned entity

Born 18 May 1987 (39 years old),Russia. Named in 12 sanctions listings.

Screen this subject

Summary

The Director Disqualification Sanction was imposed on 09/04/2025.

(also Alexey DOGUZHIEV, Ian Colin WRIGHT, Alexey DOGUZHIEV, Ian Colin WRIGHT)

Andrey Stanislavovich KORINETS a participé à des cyberattaques ayant des effets importants, qui constituent une menace extérieure pour l’Union ou ses États membres. Andrey Stanislavovich KORINETS est un officier du “Centre 18” du Service fédéral de sécurité (FSB) de la Fédération de Russie. Andrey Stanislavovich KORINETS fait partie du “groupe Callisto”, composé de membres du renseignement militaire russe qui mènent des cyberopérations contre des États membres de l’Union et des états tiers. Le groupe Callisto (autrement connu sous le nom “Seaborgium”, “Star Blizzard”, “ColdRiver” ou “TA446”) a lancé des campagnes d’hameçonnage pluriannuelles destinées à voler des identifiants et données liés à des comptes. En outre, le groupe Callisto est responsable de campagnes ciblant des personnes et des fonctions critiques de l’État, y compris dans les domaines de la défense et des relations extérieures. Par conséquent, Andrey Stanislavovich KORINETS est impliqué dans des cyberattaques ayant des effets importants, qui constituent une menace extérieure pour l’Union ou ses États membres.

Andrey Stanislavovich Korinets and his co-conspirator

Korinets is a Russian national with known affiliations to a discrete operational unit within the FSB known by cybersecurity investigators as the “Callisto Group”.

(also Andrey Stanislavovich KORINETS)

(UE) 2024/1778 du 24/06/2024 (UE Cyberattaques - R (UE) 2019/796) (FondementJuridique: 3769)

(Date of UN designation: 2024-06-24)

Sanctions and listings12

  • Listed
    24 Jun 2024

    EU Restrictive Measures Against Cyber-Attacks Threatening The Union Or Its Member States - CYB

    Directorate‑General for Financial Stability, Financial Services and Capital Markets UnionEU Financial Sanctions Files (FSF)European Union

    Designation date published: 2024-06-24

    regulationType=amendment; organisationType=council

    2024/1778 (OJ L24062024)

    Programme EU-CYBReference EU.11845.62eur-lex.europa.eusanctionsmap.eu

  • Listed
    31 Oct 2024
    Effective
    7 Dec 2023

    Reciprocal

    OFACUS SAM Procurement ExclusionsUnited StatesActive

    Prohibition/Restriction

    Redacted for Security Reasons

    sam.gov

  • Listed
    24 Jun 2024

    EU Restrictive Measures Against Cyber-Attacks Threatening The Union Or Its Member States

    Federal Public Service FinanceBelgian Financial SanctionsBelgium

    2024/1778 (OJ L24062024)

    Programme EU-CYBfinance.belgium.besanctionsmap.eu

  • Official designation

    La Principauté de MonacoMonaco National Fund Freezing ListMonaco

    Rectificatif au règlement d'exécution (UE) 2024/1778 du 24/06/2024 publié le 09/07/2024 and (ue) 2024/1778 du 24/06/2024

    Autorité de désignation publiée : Union européenne

    Andrey Stanislavovich KORINETS a participé à des cyberattaques ayant des effets importants, qui constituent une menace extérieure pour l’Union ou ses États membres. Andrey Stanislavovich KORINETS est un officier du “Centre 18” du Service fédéral de sécurité (FSB) de la Fédération de Russie. Andrey Stanislavovich KORINETS fait partie du “groupe Callisto”, composé de membres du renseignement russe qui mènent des cyberopérations contre des États membres de l’Union et des États tiers. Le groupe Callisto (autrement connu sous le nom “Seaborgium”, “Star Blizzard”, “ColdRiver” ou “TA446”) a lancé des campagnes d’hameçonnage pluriannuelles destinées à voler des identifiants et données liés à des comptes. En outre, le groupe Callisto est responsable de campagnes ciblant des personnes et des fonctions critiques de l’État, y compris dans les domaines de la défense et des relations extérieures. Par conséquent, Andrey Stanislavovich KORINETS est impliqué dans des cyberattaques ayant des effets importants, qui constituent une menace extérieure pour l’Union ou ses États membres.

    geldefonds.gouv.mc

  • Listed
    7 Dec 2023

    Reciprocal

    OFACUS SAM Procurement ExclusionsUnited StatesActive

    Prohibition/Restriction

    Redacted for Security Reasons

    sam.gov

  • Listed
    7 Dec 2023

    Cyber-Related Sanctions - CYBER2

    Office of Foreign Assets ControlUS OFAC Specially Designated Nationals (SDN) ListUnited States

    CYBER2 and block

    Secondary sanctions risk: Ukraine-/Russia-Related Sanctions Regulations, 31 CFR 589.201

    Executive Order 13694 (Cyber)

    Programme US-CYBReference 46787treasury.govofac.treasury.gov

  • Effective
    29 Jun 2025
    Ended
    29 Jun 2035

    Law of Ukraine "On Sanctions" No. 1644-VII dated 14 Aug. 2014 - 442/2025

    National Security and Defense CouncilUkraine NSDC State Register of SanctionsUkraine

    [1] блокування активів - тимчасове позбавлення права користуватися та розпоряджатися активами, що належать фізичній або юридичній особі, а також активами, щодо яких така особа може прямо чи опосередковано (через інших фізичних або юридичних осіб) вчиняти дії, тотожні за змістом здійсненню права розпорядження ними and [21] відмова в наданні та скасування віз резидентам іноземних держав, застосування інших заборон в’їзду на територію україни

    Programme UA-SA1644Reference 25044211100047drs.nsdc.gov.uakmu.gov.ua

  • Listed
    31 Oct 2024
    Effective
    7 Dec 2023

    Reciprocal

    OFACUS SAM Procurement ExclusionsUnited StatesActive

    Prohibition/Restriction

    Redacted for Security Reasons

    sam.gov

  • EU Restrictive Measures Against Cyber-Attacks Threatening The Union Or Its Member States - Council Decision concerning restrictive measures against cyber-attacks threatening the Union or its Member States

    Council of the European UnionEU Consolidated Travel BansEuropean Union

    regulationType=council decision; organisationType=council

    Council Decision concerning restrictive measures against cyber-attacks threatening the Union or its Member States

    Programme EU-CYBeur-lex.europa.eusanctionsmap.eu

  • Effective
    7 Dec 2023

    UK sanctions relating to cyber activity - The Cyber (Sanctions) (EU Exit) Regulations 2020

    UK; Foreign, Commonwealth & Development OfficeUK FCDO Sanctions ListUnited Kingdom

    Director Disqualification Sanction, travel ban and asset freeze

    Andrey Stanislavovich KORINETS, a member of the Callisto Group (AKA Seaborgium, Star Blizzard, Cold River), is or has been involved in relevant cyber activity, including providing technical assistance that could contribute to relevant cyber activity. This included the preparation of spear-phishing campaigns and associated activity that resulted in unauthorised access and exfiltration of sensitive data. This action undermined, or was intended to undermine, the integrity, prosperity and security of UK organisations and more broadly, the UK government, and directly or indirectly caused, or was intended to cause, economic loss to, or prejudice to the commercial interests of, those affected by the activity. The Callisto Group, a cyber programme operated by officers of the Russian FSB, was responsible for intrusions into the Institute for Statecraft (IfS), a UK-based think tank responsible for a programme to research, publicise, and counter the threat to European democracies from disinformation and other forms of hybrid warfare. Official documents belonging to IfS were released in the hack and subsequent leak, resulting from the preparation of spear-phishing campaigns and associated activity.

    Andrey Stanislavovich KORINETS, a member of the Callisto Group (AKA Seaborgium, Star Blizzard, Cold River), is or has been involved in relevant cyber activity, including providing technical assistance that could contribute to relevant cyber activity. This included the preparation of spear-phishing campaigns and associated activity that resulted in unauthorised access and exfiltration of sensitive data. This action undermined, or was intended to undermine, the integrity, prosperity and security of UK organisations and more broadly, the UK government, and directly or indirectly caused, or was intended to cause, economic loss to, or prejudice to the commercial interests of, those affected by the activity. The Callisto Group, a cyber programme operated by officers of the Russian FSB, was responsible for intrusions into the Institute for Statecraft (IfS), a UK-based think tank responsible for a programme to research, publicise, and counter the threat to European democracies from disinformation and other forms of hybrid warfare. Official documents belonging to IfS were released in the hack and subsequent leak, resulting from the preparation of spear-phishing campaigns and associated activity.

    Programme GB-CYBReference CYB0042Reference 16278Last updated 9 Apr 2025gov.ukgov.uk

  • EU Restrictive Measures Against Cyber-Attacks Threatening The Union Or Its Member States - Council Decision concerning restrictive measures against cyber-attacks threatening the Union or its Member States

    Council of the European UnionEU Consolidated Travel BansEuropean Union

    regulationType=council decision; organisationType=council

    Council Decision concerning restrictive measures against cyber-attacks threatening the Union or its Member States

    Programme EU-CYBeur-lex.europa.eusanctionsmap.eu

  • EU Restrictive Measures Against Cyber-Attacks Threatening The Union Or Its Member States - (UE) 2024/1778 du 24/06/2024 (UE Cyberattaques - R (UE) 2019/796)

    Direction Générale du TrésorFrench National Asset Freezing SystemFrance

    Andrey Stanislavovich KORINETS a participé à des cyberattaques ayant des effets importants, qui constituent une menace extérieure pour l’Union ou ses États membres. Andrey Stanislavovich KORINETS est un officier du “Centre 18” du Service fédéral de sécurité (FSB) de la Fédération de Russie. Andrey Stanislavovich KORINETS fait partie du “groupe Callisto”, composé de membres du renseignement militaire russe qui mènent des cyberopérations contre des États membres de l’Union et des états tiers. Le groupe Callisto (autrement connu sous le nom “Seaborgium”, “Star Blizzard”, “ColdRiver” ou “TA446”) a lancé des campagnes d’hameçonnage pluriannuelles destinées à voler des identifiants et données liés à des comptes. En outre, le groupe Callisto est responsable de campagnes ciblant des personnes et des fonctions critiques de l’État, y compris dans les domaines de la défense et des relations extérieures. Par conséquent, Andrey Stanislavovich KORINETS est impliqué dans des cyberattaques ayant des effets importants, qui constituent une menace extérieure pour l’Union ou ses États membres.

    Programme EU-CYBgels-avoirs.dgtresor.gouv.frsanctionsmap.eu

Positions held1

  1. Period not retained

    Officier du “Centre 18” du Service fédéral de sécurité (FSB) de la Fédération de Russie

Identifiers3

IdentifierNumberIssued by
Passport8707233962
Passport8707233962
Passport8707233962Russia

Other names12

Also known as12

Andrii Stanislavovych KORINETsAlexey DoguzhievIan Colin WrightAndrej Stanislavovič KoriněcAlexey DOGUZHIEVАндрей Станиславович КОРИНЕЦIan Colin WRIGHTKORINETS, Andrey StanislavovichAndrei Stanislavovich KORINETSАндрій Станіславович КОРІНЕЦЬAndrey Stanislavovich KORINETSАндрей Станиславович Коринец

Addresses2

  • Syktyvkar, Komi Republic

  • Komi Republic, Syktyvkar, Russia

This page shows the public record as its publishers state it. A name here is not by itself a finding: whether a record refers to a particular person or company is what screening decides. Read the full notice.