Feeds

Feds sue Russian for stock pump and dump hack

Hijacked accounts = easy money

SANS - Survey on application security programs

The US Securities and Exchange Commission accused a Russian man of earning more than $255,000 in illegal stock sales by using hijacked brokerage accounts to artificially manipulate the price of shares in more than three dozen companies.

Valery Maltsev used a legitimate account to buy positions in 38 thinly traded stocks, and then use compromised brokerage accounts to buy or sell huge numbers of the same companies, agency attorneys alleged. The 36-year-old resident of St Petersburg, Russia would then turn around and sell his holdings at a sizeable premium, according to a lawsuit filed in US District Court in Manhattan.

The scheme earned at least $255,532 from August to December at a cost of $603,000 to broker-dealers, which had to reimburse customers. Maltsev, who is the president and only officer of a company called BroCo Investments, has tried to withdraw $310,000 out of his account at Genesis Securities and have the money wired to a bank in Cyprus. Genesis has not yet processed the requests.

The lawsuit seeks an order freezing the Genesis accounts and requiring Maltsev to repay the lost funds.

To appreciate the havoc the scheme wreaked on some stocks, consider the following: Between December 1 and December 20, AmeriServe Financial (ticker ASRV) traded an average of about 11,300 shares per day. Then on December 21 - the same day Maltsev allegedly executed his manipulation scheme - trading volume skyrocketed to 277,567 shares, thanks largely to purchases made by three compromised accounts from Scottrade.

In less than a half-hour's time, Maltsev was able to earn $17,760, first by driving up the price of the stock and selling 6,500 shares at an artificially high price, and then, once the sell-off began, selling another 80,000 short positions he had at artificially low prices. Short positions are trades that bet a security will decrease in value.

"The unauthorized purchase and sale orders in the intruded accounts during the ASRV intrusion resulted in losses of $20,355.63 to the holders of the intruded accounts," the complaint states. "In addition, Maltsev's manipulative trading caused damage to market participants who purchased shares of ASRV during the intrusion period."

The SEC action is only the latest to take aim at stock manipulation schemes that exploit hijacked brokerage accounts. In 2007, the agency targeted at least four men in two separate actions. ®

High performance access to file storage

More from The Register

next story
Obama allows NSA to exploit 0-days: report
If the spooks say they need it, they get it
Putin tells Snowden: Russia conducts no US-style mass surveillance
Gov't is too broke for that, Russian prez says
Snowden-inspired crypto-email service Lavaboom launches
German service pays tribute to Lavabit
Mounties always get their man: Heartbleed 'hacker', 19, CUFFED
Canadian teen accused of raiding tax computers using OpenSSL bug
One year on: diplomatic fail as Chinese APT gangs get back to work
Mandiant says past 12 months shows Beijing won't call off its hackers
Heartbleed exploit, inoculation, both released
File under 'this is going to hurt you more than it hurts me'
Arts and crafts store Michaels says 3 million credit cards exposed in breach
Meanwhile, Target investigators prepare for long process in nabbing hackers
prev story

Whitepapers

SANS - Survey on application security programs
In this whitepaper learn about the state of application security programs and practices of 488 surveyed respondents, and discover how mature and effective these programs are.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Top three mobile application threats
Learn about three of the top mobile application security threats facing businesses today and recommendations on how to mitigate the risk.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.