Insider Trading: Ukrainian Hackers Accomplice Pleads Guilty

A US stockbroker pleaded guilty to conspiracy for his role in an insider-trading ring that reaped millions of dollars in illicit profits from Ukrainian hackers who pilfered corporate press releases before they were published.

Leonid Momotok, of Suwanee, Georgia, admitted he controlled a brokerage account used in a five-year scheme. At a hearing recently before US Magistrate Judge Ramon Reyes, he admitted he placed and profited from trades based on information he knew was stolen.

“I knew that this inside information was being passed to traders like myself and on the basis of this information, I executed trades on New York stock exchanges,” he said. “It was bad judgment and I am very sorry.”

Momotok, 48, was one of nine people charged in a case that federal prosecutors in Brooklyn and New Jersey described last year as the largest scheme of its kind ever prosecuted in both the scope of the alleged hacking and the number of traders involved.

Plea Deal

Momotok was indicted on conspiracy, securities fraud, money laundering and other charges. The most serious crimes of securities fraud and wire fraud carry terms of as long as 20 years in prison.

As part of a plea deal, Momotok pleaded guilty to one count of conspiracy to commit wire fraud and agreed not to challenge a prison sentence of not more than nine years when he is sentenced Dec. 9. He and his attorney, Linda Moreno, declined to comment as they left the courtroom.

The case highlights an unusual intersection of securities fraud and hacking. Prosecutors said the ring employed a criminal alliance of traders and hackers who infiltrated PR Newswire Association LLC, Marketwired Inc. and Business Wire, obtaining more than 150,000 unpublished news releases ahead of market-moving news. Traders made about $30 million in illicit gains.

The ring gained access to the three services by launching a series of orchestrated cyber-attacks using malware and obtaining the log-in credentials of newswire employees, according to the government. Hackers then circulated “shopping lists” of companies about to issue news releases, such as Panera Bread Co, Caterpillar Inc., Home Depot Inc. and Advanced Micro Devices Inc., the government said.

Leaked Releases

Members of the ring in the US and the Ukraine, including Momotok, then traded on the leaked news releases ahead of their publication, prosecutors said. Millions of dollars were laundered when they were transferred to Europe, Asia and elsewhere using shell companies, according to the government.

Momotok’s co-defendant, Vitaly Korchevsky, called the alleged “linchpin” by prosecutors, is accused of making $17 million. He pleaded not guilty to the charges and is awaiting trial. Another co-defendant, Alexander Garkusha, pleaded guilty in December and is cooperating with the US. He hasn’t yet been sentenced. A fourth man isn’t in custody.

Of the five charged in New Jersey, two have pleaded guilty and charges are pending against the other three, according to court records.

Information-Management

 

« Mobile Battery Tracks You Online
Cybersecurity Issues Are M&A Deal Breakers »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

Perimeter 81 / How to Select the Right ZTNA Solution

Perimeter 81 / How to Select the Right ZTNA Solution

Gartner insights into How to Select the Right ZTNA offering. Download this FREE report for a limited time only.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

Satisnet

Satisnet

Satisnet is a leading Security Reseller, Managed Security Services Provider (MSSP) and Cyber Training Innovator, with operations throughout the UK, EMEA and United States.

Get Cyber Safe

Get Cyber Safe

Get Cyber Safe is a national public awareness campaign created to educate Canadians about Internet security and the simple steps they can take to protect themselves online.

Lloyd's

Lloyd's

As an insurance market, Lloyd’s can provide access to more than 65 expert cyber risk insurers in one place.

Momentum

Momentum

The Cyber Security team at Momentum offers a professional and specialist recruitment service across Cyber & IT Security.

Gatewatcher

Gatewatcher

Gatewatcher is a digital breach detection platform targeting crafted attacks and protecting organizations against advanced cyber threats.

Military Cyber Professionals Association (MCPA)

Military Cyber Professionals Association (MCPA)

MCPA are a team of Soldiers, Sailors, Airmen, Marines, Veterans and others interested in the development of the American military cyber profession.

SynerComm

SynerComm

SynerComm is an IT solution provider specializing in network and security infrastructure, enterprise mobility, remote access, wireless solutions, audit, pentesting and information assurance.

Paladin Capital Group

Paladin Capital Group

Paladin is a leading global investor that supports and grows the world’s most innovative cyber companies.

THEC-Incubator

THEC-Incubator

THEC-Incubator program is designed for international and ambitious tech startups in the Netherlands. Areas of focus include Blockchain and Cyber Security.

Drootoo

Drootoo

Drootoo is transforming businesses and making them high performing entities with its unified cloud platform.

Genius Guard

Genius Guard

Genius Guard specializes in DDoS Protection, DDoS Protected Webhosting, HYIP Hosting, Bitcoin Hosting, Cryptocurrency Hosting.

Pyxsoft PowerWAF

Pyxsoft PowerWAF

Pyxsoft PowerWAF responds to the problem of business cybersecurity. We protect our clients' websites and data against attacks and exploitation of all kinds of vulnerabilities.

10dot Cloud Security

10dot Cloud Security

10dot Cloud Security is a security service management company. Our solutions give you contextualised visibility into your network security.

Stratus Technologies

Stratus Technologies

Edge Computing solves the inherent challenges of bandwidth, latency, and security at edge locations to enable IIoT devices and data acquisition.

Firesand

Firesand

Based in Milton Keynes, Firesand Ltd provides penetration testing services to improve your cyber security and protect your company against hackers.

Kong

Kong

Kong - powering the API world. Increase developer productivity, security, and performance at scale with the unified platform for API management, service mesh, and ingress controller.