By Kim LaCapria
Publication Date: 2026-09-23 05:04:00
Typing your bank’s name into Google and clicking the first result may feel like the quickest way to log in — but federal investigators say that common habit became the entry point for a scheme that stole credentials and drained real accounts.
The warning took on new urgency Sept. 8, when the Department of Justice announced the extradition of Sergei Anatolyevich Filimonov, a 36-year-old Russian national and web developer accused of helping support the operation’s infrastructure, Fox News reported.
Here’s what to know
Federal prosecutors allege the group paid for sponsored search links so their ads would appear when customers searched for their banks.
Prosecutors say the credentials entered on those fake pages were later used to log in to real bank accounts, review balances, and send unauthorized wire transfers.
Rather than reaching a legitimate website, victims were reportedly redirected to spoofed domains built to resemble pages for federally insured…