Feeds

Feds sue Russian for stock pump and dump hack

Hijacked accounts = easy money

Internet Security Threat Report 2014

The US Securities and Exchange Commission accused a Russian man of earning more than $255,000 in illegal stock sales by using hijacked brokerage accounts to artificially manipulate the price of shares in more than three dozen companies.

Valery Maltsev used a legitimate account to buy positions in 38 thinly traded stocks, and then use compromised brokerage accounts to buy or sell huge numbers of the same companies, agency attorneys alleged. The 36-year-old resident of St Petersburg, Russia would then turn around and sell his holdings at a sizeable premium, according to a lawsuit filed in US District Court in Manhattan.

The scheme earned at least $255,532 from August to December at a cost of $603,000 to broker-dealers, which had to reimburse customers. Maltsev, who is the president and only officer of a company called BroCo Investments, has tried to withdraw $310,000 out of his account at Genesis Securities and have the money wired to a bank in Cyprus. Genesis has not yet processed the requests.

The lawsuit seeks an order freezing the Genesis accounts and requiring Maltsev to repay the lost funds.

To appreciate the havoc the scheme wreaked on some stocks, consider the following: Between December 1 and December 20, AmeriServe Financial (ticker ASRV) traded an average of about 11,300 shares per day. Then on December 21 - the same day Maltsev allegedly executed his manipulation scheme - trading volume skyrocketed to 277,567 shares, thanks largely to purchases made by three compromised accounts from Scottrade.

In less than a half-hour's time, Maltsev was able to earn $17,760, first by driving up the price of the stock and selling 6,500 shares at an artificially high price, and then, once the sell-off began, selling another 80,000 short positions he had at artificially low prices. Short positions are trades that bet a security will decrease in value.

"The unauthorized purchase and sale orders in the intruded accounts during the ASRV intrusion resulted in losses of $20,355.63 to the holders of the intruded accounts," the complaint states. "In addition, Maltsev's manipulative trading caused damage to market participants who purchased shares of ASRV during the intrusion period."

The SEC action is only the latest to take aim at stock manipulation schemes that exploit hijacked brokerage accounts. In 2007, the agency targeted at least four men in two separate actions. ®

Internet Security Threat Report 2014

More from The Register

next story
George Clooney, WikiLeaks' lawyer wife hand out burner phones to wedding guests
Day 4: 'News'-papers STILL rammed with Clooney nuptials
Shellshock: 'Larger scale attack' on its way, warn securo-bods
Not just web servers under threat - though TENS of THOUSANDS have been hit
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
PEAK IPV4? Global IPv6 traffic is growing, DDoS dying, says Akamai
First time the cache network has seen drop in use of 32-bit-wide IP addresses
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
Stunned by Shellshock Bash bug? Patch all you can – or be punished
UK data watchdog rolls up its sleeves, polishes truncheon
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
The next step in data security
With recent increased privacy concerns and computers becoming more powerful, the chance of hackers being able to crack smaller-sized RSA keys increases.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.