{"id":24444,"date":"2019-01-16T13:35:43","date_gmt":"2019-01-16T13:35:43","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/29725\/Two-Ukrainians-Charged-With-2016-Hack-Of-SEC.html"},"modified":"2019-01-16T13:35:43","modified_gmt":"2019-01-16T13:35:43","slug":"two-ukrainians-charged-with-2016-hack-of-sec","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/two-ukrainians-charged-with-2016-hack-of-sec\/","title":{"rendered":"Two Ukrainians Charged With 2016 Hack Of SEC"},"content":{"rendered":"
<\/div>\n

US authorities have charged two Ukrainian men with hacking into the US Securities and Exchange Commission’s computer networks to steal and profit from nonpublic earnings reports of publicly traded companies.<\/p>\n

The indictment, filed Tuesday by the US Justice Department, accuses the pair of hacking into EDGAR, the SEC’s corporate filing system used by public companies, in 2016. The hack, which went undetected for more than five months, netted the defendants and conspirators more than $4.1 million in illegal profits after they placed trades based on the stolen information, authorities said<\/p>\n

The defendants’ hacking and insider trading scheme cheated the securities markets and the investing public, US Attorney Craig Carpenito said in a statement.<\/p>\n

“They targeted the Securities and Exchange Commission with a series of sophisticated and relentless cyber-attacks, stealing thousands of confidential EDGAR filings from the commission’s servers and then trading on the inside information in those filings before it was known to the market, all at the expense of the average investor,” Carpenito said.<\/p>\n

SEC Chairman John Clayton revealed the hack<\/a><\/span> in September 2017. At the time, Clayton said nonpublic information was transmitted through nonsecured personal email accounts.<\/p>\n

On Tuesday, authorities accused Artem Radchenko, 27, and Oleksandr Ieremenko, 26, of conspiring to commit securities fraud, computer fraud and wire fraud in their alleged hack of Edgar. The pair used targeted cyberattacks, including phishing attacks and planted malware, to gain access to the SEC’s computer networks, authorities said.<\/p>\n

They then used a server in Lithuania to obtain thousands of “test filings,” filings companies make in advance of public release and that often contain information that’s similar or identical to that found in the official filing.<\/p>\n

Related civil charges were also filed against nine individuals accused of conspiring with Ieremenko to profit from trades placed on information contained in the stolen filings. Two traders in Los Angeles, Sungjin Cho and David Kwon, were named as defendants in the SEC lawsuit.<\/p>\n

Ieremenko was charged in 2015 with the theft of 150,000 press releases<\/a><\/span> from services like PR Newswire, Business Wire and Marketwired. Iermolovych allegedly made tens of thousands of dollars by selling the releases online and many millions more by making trading decisions based on the non-yet-public information contained within.<\/p>\n

Security<\/a>: Stay up-to-date on the latest in breaches, hacks, fixes and all those cybersecurity issues that keep you up at night.<\/p>\n

Blockchain Decoded<\/a>: CNET looks at the tech powering bitcoin — and soon, too, a myriad services that will change your life.<\/p>\n