Attacks/Breaches

5/23/2017
12:00 AM
50%
50%

Hacker Hit with 30-Month Prison Term in Securities Case

Ukrainian hacker sentenced for his role stealing press releases about upcoming stock trades that generated roughly $30 million in illegal profits.

A federal court sentenced a Ukrainian hacker to 30 months in prison for his role in the largest known case of securities fraud using computer hacking, according to an announcement Monday by the US Attorney's Office in New Jersey.

Vadym Iermolovych, 29, pleaded guilty to conspiracy to commit wire fraud, computer hacking, and aggravated identity theft. Between February 2010 to August 2015, Iermolovych and his cohorts hacked into Marketwired, Business Wire, and PR Newswire (PRN), to steal press releases about upcoming announcements from publically traded companies before the information was released. (PRN was previously owned by UBM, which is the parent company of Dark Reading.)

The stolen press releases were then given to three stock traders who bought and sold shares based on what they learned in the announcements, giving them an edge before the general public could act on the market-moving information.

The stock trades generated roughly $30 million in illegal profits. Iermolovych, in addition to his prison sentence, is also required to pay $3 million in restitution for his actions.

Read more about the hacker here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
What We Talk About When We Talk About Risk
Jack Jones, Chairman, FAIR Institute,  7/11/2018
Ticketmaster Breach Part of Massive Payment Card Hacking Campaign
Jai Vijayan, Freelance writer,  7/10/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-14072
PUBLISHED: 2018-07-15
libsixel 1.8.1 has a memory leak in sixel_decoder_decode in decoder.c, image_buffer_resize in fromsixel.c, and sixel_decode_raw in fromsixel.c.
CVE-2018-14073
PUBLISHED: 2018-07-15
libsixel 1.8.1 has a memory leak in sixel_allocator_new in allocator.c.
CVE-2018-14068
PUBLISHED: 2018-07-15
An issue was discovered in SRCMS V2.3.1. There is a CSRF vulnerability that can add an admin account via admin.php?m=Admin&c=manager&a=add.
CVE-2018-14069
PUBLISHED: 2018-07-15
An issue was discovered in SRCMS V2.3.1. There is a CSRF vulnerability that can add a user account via admin.php?m=Admin&c=member&a=add.
CVE-2018-14066
PUBLISHED: 2018-07-15
The content://wappush content provider in com.android.provider.telephony, as found in some custom ROMs for Android phones, allows SQL injection. One consequence is that an application without the READ_SMS permission can read SMS messages. This affects Infinix X571 phones, as well as various Lenovo p...