Russia-linked crooks bought a bank for Christmas to launder cyber loot