CyberNew CyberNew
Threat Intelligence & APT The Record 1 month ago

Russian suspect in bank account takeovers is extradited to US

CN
CyberNew Threat Research Desk
• Original Reporting: The Record
CyberNew Threat Intel Assessment
Assessed Severity: INFORMATIONAL
Impacted Surface
Enterprise Perimeter & Network Defense
Intelligence Sector
Threat Intelligence & APT

Analyst Takeaway

"Image: Kindel Media via Pexels Russian suspect in bank account takeovers is extradited to US A Russian web developer who played a role in a multimillion-dollar bank account takeover scheme has been extradited to the U.S. to face an indictment in the case, federal authorities said Tuesday. Sergei Anatolyevich Filimonov, 36, appeared in an Atlanta federal court on September 4, pleading not guilty..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
Handcuffs
Image: Kindel Media via Pexels

Russian suspect in bank account takeovers is extradited to US

A Russian web developer who played a role in a multimillion-dollar bank account takeover scheme has been extradited to the U.S. to face an indictment in the case, federal authorities said Tuesday.

Sergei Anatolyevich Filimonov, 36, appeared in an Atlanta federal court on September 4, pleading not guilty to charges of fraud and identity theft, prosecutors said. Filimonov had been extradited from the Republic of Georgia and remains in custody, the announcement said.

“Filimonov allegedly used spoofed domains and fraudulent login pages to target unsuspecting online banking customers, stealing millions from victims,” said Marlo Graham, FBI Atlanta’s special agent in charge.

The case is linked to the December 2025 federal seizure of the web domain web3adspanels.org, authorities said. As of that announcement, the FBI had identified at least 19 victims with attempted losses totaling about $28 million and confirmed losses of roughly $14.6 million. Investigators said the seized domain held login credentials for thousands of victims.

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from The Record.

Primary Advisory →