News for hackers. Stuff that matters.

A comment on DOJ: Hackers broke into an SEC database and made millions from inside info.

Re:DOJ: Hackers broke into an SEC database and made millions... by roadkillon101 on Wednesday January 16, 2019 @10:18AM (#18921513)
I'm more curious about how they hacked into the SEC database? Did they use an email trojan? Exploit an existing flaw or backdoor? If they did this via e-mail, who did they send the mail to?
[ Parent | on HN ]
Re:DOJ: Hackers broke into an SEC database and made millions... by tgragnato on Wednesday January 16, 2019 @11:08AM (#18922007)
The SEC’s complaint alleges that Ieremenko circumvented EDGAR controls that require user authentication and then navigated within the EDGAR system.

Looks like a way to say “exfiltrating data from the endpoints”.

[ Parent | on HN ]
Re:DOJ: Hackers broke into an SEC database and made millions... by lawnchair_larry on Wednesday January 16, 2019 @11:50AM (#18922394)
The good old email trojan continues to be all you need.
[ Parent | on HN ]
Re:DOJ: Hackers broke into an SEC database and made millions... by unwabuisi on Wednesday January 16, 2019 @03:34PM (#18924853)
> The hackers used malicious software sent via email to SEC employees. Then, after planting the software on the SEC computers, they sent the information they were able to gather from the EDGAR system to servers in Lithuania, where they either used it or distributed the data to other criminals, Carpenito said.
[ Parent | on HN ]
Re:DOJ: Hackers broke into an SEC database and made millions... by devin on Wednesday January 16, 2019 @11:01AM (#18921936)
This is covered in the story. They sent email to SEC employees.
[ Parent | on HN ]