Andrey Stanislavovich Korinets
Sanctioned entityBorn 18 May 1987 (39 years old),Russia. Named in 12 sanctions listings.
Summary
The Director Disqualification Sanction was imposed on 09/04/2025.
(also Alexey DOGUZHIEV, Ian Colin WRIGHT, Alexey DOGUZHIEV, Ian Colin WRIGHT)
Andrey Stanislavovich KORINETS a participé à des cyberattaques ayant des effets importants, qui constituent une menace extérieure pour l’Union ou ses États membres. Andrey Stanislavovich KORINETS est un officier du “Centre 18” du Service fédéral de sécurité (FSB) de la Fédération de Russie. Andrey Stanislavovich KORINETS fait partie du “groupe Callisto”, composé de membres du renseignement militaire russe qui mènent des cyberopérations contre des États membres de l’Union et des états tiers. Le groupe Callisto (autrement connu sous le nom “Seaborgium”, “Star Blizzard”, “ColdRiver” ou “TA446”) a lancé des campagnes d’hameçonnage pluriannuelles destinées à voler des identifiants et données liés à des comptes. En outre, le groupe Callisto est responsable de campagnes ciblant des personnes et des fonctions critiques de l’État, y compris dans les domaines de la défense et des relations extérieures. Par conséquent, Andrey Stanislavovich KORINETS est impliqué dans des cyberattaques ayant des effets importants, qui constituent une menace extérieure pour l’Union ou ses États membres.
Andrey Stanislavovich Korinets and his co-conspirator
Korinets is a Russian national with known affiliations to a discrete operational unit within the FSB known by cybersecurity investigators as the “Callisto Group”.
(also Andrey Stanislavovich KORINETS)
(UE) 2024/1778 du 24/06/2024 (UE Cyberattaques - R (UE) 2019/796) (FondementJuridique: 3769)
(Date of UN designation: 2024-06-24)
Sanctions and listings12
- Listed
- 24 Jun 2024
EU Restrictive Measures Against Cyber-Attacks Threatening The Union Or Its Member States - CYB
Directorate‑General for Financial Stability, Financial Services and Capital Markets UnionEU Financial Sanctions Files (FSF)European Union
Designation date published: 2024-06-24
regulationType=amendment; organisationType=council
2024/1778 (OJ L24062024)
Programme EU-CYBReference EU.11845.62eur-lex.europa.eusanctionsmap.eu
- Listed
- 31 Oct 2024
- Effective
- 7 Dec 2023
Reciprocal
OFACUS SAM Procurement ExclusionsUnited StatesActive
Prohibition/Restriction
Redacted for Security Reasons
- Listed
- 24 Jun 2024
EU Restrictive Measures Against Cyber-Attacks Threatening The Union Or Its Member States
Federal Public Service FinanceBelgian Financial SanctionsBelgium
2024/1778 (OJ L24062024)
Programme EU-CYBfinance.belgium.besanctionsmap.eu
Official designation
La Principauté de MonacoMonaco National Fund Freezing ListMonaco
Rectificatif au règlement d'exécution (UE) 2024/1778 du 24/06/2024 publié le 09/07/2024 and (ue) 2024/1778 du 24/06/2024
Autorité de désignation publiée : Union européenne
Andrey Stanislavovich KORINETS a participé à des cyberattaques ayant des effets importants, qui constituent une menace extérieure pour l’Union ou ses États membres. Andrey Stanislavovich KORINETS est un officier du “Centre 18” du Service fédéral de sécurité (FSB) de la Fédération de Russie. Andrey Stanislavovich KORINETS fait partie du “groupe Callisto”, composé de membres du renseignement russe qui mènent des cyberopérations contre des États membres de l’Union et des États tiers. Le groupe Callisto (autrement connu sous le nom “Seaborgium”, “Star Blizzard”, “ColdRiver” ou “TA446”) a lancé des campagnes d’hameçonnage pluriannuelles destinées à voler des identifiants et données liés à des comptes. En outre, le groupe Callisto est responsable de campagnes ciblant des personnes et des fonctions critiques de l’État, y compris dans les domaines de la défense et des relations extérieures. Par conséquent, Andrey Stanislavovich KORINETS est impliqué dans des cyberattaques ayant des effets importants, qui constituent une menace extérieure pour l’Union ou ses États membres.
- Listed
- 7 Dec 2023
Reciprocal
OFACUS SAM Procurement ExclusionsUnited StatesActive
Prohibition/Restriction
Redacted for Security Reasons
- Listed
- 7 Dec 2023
Cyber-Related Sanctions - CYBER2
Office of Foreign Assets ControlUS OFAC Specially Designated Nationals (SDN) ListUnited States
CYBER2 and block
Secondary sanctions risk: Ukraine-/Russia-Related Sanctions Regulations, 31 CFR 589.201
Executive Order 13694 (Cyber)
Programme US-CYBReference 46787treasury.govofac.treasury.gov
- Effective
- 29 Jun 2025
- Ended
- 29 Jun 2035
Law of Ukraine "On Sanctions" No. 1644-VII dated 14 Aug. 2014 - 442/2025
National Security and Defense CouncilUkraine NSDC State Register of SanctionsUkraine
[1] блокування активів - тимчасове позбавлення права користуватися та розпоряджатися активами, що належать фізичній або юридичній особі, а також активами, щодо яких така особа може прямо чи опосередковано (через інших фізичних або юридичних осіб) вчиняти дії, тотожні за змістом здійсненню права розпорядження ними and [21] відмова в наданні та скасування віз резидентам іноземних держав, застосування інших заборон в’їзду на територію україни
Programme UA-SA1644Reference 25044211100047drs.nsdc.gov.uakmu.gov.ua
- Listed
- 31 Oct 2024
- Effective
- 7 Dec 2023
Reciprocal
OFACUS SAM Procurement ExclusionsUnited StatesActive
Prohibition/Restriction
Redacted for Security Reasons
EU Restrictive Measures Against Cyber-Attacks Threatening The Union Or Its Member States - Council Decision concerning restrictive measures against cyber-attacks threatening the Union or its Member States
Council of the European UnionEU Consolidated Travel BansEuropean Union
regulationType=council decision; organisationType=council
Council Decision concerning restrictive measures against cyber-attacks threatening the Union or its Member States
Programme EU-CYBeur-lex.europa.eusanctionsmap.eu
- Effective
- 7 Dec 2023
UK sanctions relating to cyber activity - The Cyber (Sanctions) (EU Exit) Regulations 2020
UK; Foreign, Commonwealth & Development OfficeUK FCDO Sanctions ListUnited Kingdom
Director Disqualification Sanction, travel ban and asset freeze
Andrey Stanislavovich KORINETS, a member of the Callisto Group (AKA Seaborgium, Star Blizzard, Cold River), is or has been involved in relevant cyber activity, including providing technical assistance that could contribute to relevant cyber activity. This included the preparation of spear-phishing campaigns and associated activity that resulted in unauthorised access and exfiltration of sensitive data. This action undermined, or was intended to undermine, the integrity, prosperity and security of UK organisations and more broadly, the UK government, and directly or indirectly caused, or was intended to cause, economic loss to, or prejudice to the commercial interests of, those affected by the activity. The Callisto Group, a cyber programme operated by officers of the Russian FSB, was responsible for intrusions into the Institute for Statecraft (IfS), a UK-based think tank responsible for a programme to research, publicise, and counter the threat to European democracies from disinformation and other forms of hybrid warfare. Official documents belonging to IfS were released in the hack and subsequent leak, resulting from the preparation of spear-phishing campaigns and associated activity.
Andrey Stanislavovich KORINETS, a member of the Callisto Group (AKA Seaborgium, Star Blizzard, Cold River), is or has been involved in relevant cyber activity, including providing technical assistance that could contribute to relevant cyber activity. This included the preparation of spear-phishing campaigns and associated activity that resulted in unauthorised access and exfiltration of sensitive data. This action undermined, or was intended to undermine, the integrity, prosperity and security of UK organisations and more broadly, the UK government, and directly or indirectly caused, or was intended to cause, economic loss to, or prejudice to the commercial interests of, those affected by the activity. The Callisto Group, a cyber programme operated by officers of the Russian FSB, was responsible for intrusions into the Institute for Statecraft (IfS), a UK-based think tank responsible for a programme to research, publicise, and counter the threat to European democracies from disinformation and other forms of hybrid warfare. Official documents belonging to IfS were released in the hack and subsequent leak, resulting from the preparation of spear-phishing campaigns and associated activity.
Programme GB-CYBReference CYB0042Reference 16278Last updated 9 Apr 2025gov.ukgov.uk
EU Restrictive Measures Against Cyber-Attacks Threatening The Union Or Its Member States - Council Decision concerning restrictive measures against cyber-attacks threatening the Union or its Member States
Council of the European UnionEU Consolidated Travel BansEuropean Union
regulationType=council decision; organisationType=council
Council Decision concerning restrictive measures against cyber-attacks threatening the Union or its Member States
Programme EU-CYBeur-lex.europa.eusanctionsmap.eu
EU Restrictive Measures Against Cyber-Attacks Threatening The Union Or Its Member States - (UE) 2024/1778 du 24/06/2024 (UE Cyberattaques - R (UE) 2019/796)
Direction Générale du TrésorFrench National Asset Freezing SystemFrance
Andrey Stanislavovich KORINETS a participé à des cyberattaques ayant des effets importants, qui constituent une menace extérieure pour l’Union ou ses États membres. Andrey Stanislavovich KORINETS est un officier du “Centre 18” du Service fédéral de sécurité (FSB) de la Fédération de Russie. Andrey Stanislavovich KORINETS fait partie du “groupe Callisto”, composé de membres du renseignement militaire russe qui mènent des cyberopérations contre des États membres de l’Union et des états tiers. Le groupe Callisto (autrement connu sous le nom “Seaborgium”, “Star Blizzard”, “ColdRiver” ou “TA446”) a lancé des campagnes d’hameçonnage pluriannuelles destinées à voler des identifiants et données liés à des comptes. En outre, le groupe Callisto est responsable de campagnes ciblant des personnes et des fonctions critiques de l’État, y compris dans les domaines de la défense et des relations extérieures. Par conséquent, Andrey Stanislavovich KORINETS est impliqué dans des cyberattaques ayant des effets importants, qui constituent une menace extérieure pour l’Union ou ses États membres.
Programme EU-CYBgels-avoirs.dgtresor.gouv.frsanctionsmap.eu
Positions held1
Period not retained
Officier du “Centre 18” du Service fédéral de sécurité (FSB) de la Fédération de Russie
Identifiers3
| Identifier | Number | Issued by |
|---|---|---|
| Passport | 8707233962 | |
| Passport | 8707233962 | |
| Passport | 8707233962 | Russia |
Other names12
Also known as12
Addresses2
Syktyvkar, Komi Republic
Komi Republic, Syktyvkar, Russia
This page shows the public record as its publishers state it. A name here is not by itself a finding: whether a record refers to a particular person or company is what screening decides. Read the full notice.