Russian National Extradited to U.S. Over Alleged Bank-Account Takeover Scheme
Summary
Sergei Filimonov was extradited from Georgia to the U.S. over an alleged scheme using spoofed bank domains to steal more than 5,000 credentials and attempt millions of dollars in transfers. He pleaded not guilty.
Key points
- Filimonov was extradited from the Republic of Georgia to the United States and is detained in the Northern District of Georgia.
- Prosecutors allege the scheme began in November 2023 and used spoofed bank domains and sponsored links to harvest customer credentials.
- The operation allegedly collected more than 5,000 bank login credentials and used infrastructure to store them and obtain additional details to bypass security controls.
- Prosecutors say transfers totaling nearly $5.58 million and $735,000 were caused or attempted at two banks in June and November 2024.
- The FBI previously linked at least 19 U.S. victims to a seized domain and estimated about $28 million in attempted losses, including about $14.6 million in confirmed losses.
- Filimonov faces bank and wire fraud, access device fraud, and identity theft charges; he pleaded not guilty.
Article Details
- Event Type
- Extradition and criminal charges related to an alleged bank-account takeover and credential theft scheme.
- Impact
- Prosecutors allege that Sergei Anatolyevich Filimonov and unnamed co-conspirators spoofed bank domains and used sponsored links to collect more than 5,000 customer login credentials, then attempted unauthorized transfers totaling more than $6.3 million from two banks. Authorities previously seized a domain allegedly used to store harvested credentials; the FBI reported at least 19 U.S. victims linked to it, about $28 million in attempted losses, and about $14.6 million in confirmed losses.
MITRE ATT&CK
T1056.003 · Web Portal CaptureThe alleged operation harvested victims' bank login credentials through fraudulent sites.T1566.002 · Spearphishing LinkThe alleged scheme used sponsored links to direct victims to spoofed bank domains.T1583.001 · DomainsThe co-conspirators allegedly registered spoofed bank domains.T1584.001 · DomainsThe co-conspirators allegedly maintained spoofed bank domains.T1657 · Financial TheftThe alleged scheme attempted unauthorized transfers of millions of dollars from bank accounts.
People
Countries
GeorgiaAuthorities extradited Sergei Anatolyevich Filimonov from Georgia over an alleged bank-account takeover scheme that targeted victims through spoofed bank domains and stole more than 5,000 login credentials.United StatesSergei Anatolyevich Filimonov was extradited from the Republic of Georgia to the United States.