US SEC said to be probing corporate hacks by FIN4 group

Group sends sophisticated phishing emails to gain information about mergers and acquisitions

The U.S. Securities and Exchange Commission is concerned that data stolen from companies in cyberattacks is being used to conduct what effectively is insider trading, Reuters reported on Tuesday.

The securities regulator has asked at least eight publically traded companies for information on data breaches, the report said quoting "people familiar with the matter." The companies were not identified.

The investigation, which is being conducted in parallel with one by the U.S. Secret Service, said Reuters, involves a group dubbed FIN4 by computer security company FireEye.

FIN4 has been in operation since mid-2013 and has targeted more than 100 traded companies and advisory firms with highly targeted and sophisticated spear phishing attacks, FireEye said in a 2014 report. Most of the companies are in the healthcare and pharmaceutical industries, and the targets of the hacking attempts are individuals who regularly communicate about potentially market-moving information that is private, said FireEye.

The group will attempt to obtain documents related to ongoing discussions of mergers and acquisitions involving major companies, then add malware to the documents and send them on to top executives, furthering its reach inside an organization.

"On multiple occasions, FIN4 has targeted several parties involved in a single business deal, to include law firms, consultants, and the public companies involved in negotiations," the report said.

FireEye didn't guess the identity of the group but noted the emails appear to be written by native speakers of English.

The mass of information potentially available to hackers was demonstrated last December when emails from Sony Pictures Entertainment were published on the Internet. The emails contained confidential details of negotiations with traded and private companies, copies of contracts, inside information on the motion picture industry and gossip about what was happening in Hollywood.

Martyn Williams covers mobile telecoms, Silicon Valley and general technology breaking news for The IDG News Service. Follow Martyn on Twitter at @martyn_williams. Martyn's e-mail address is

Join the Good Gear Guide newsletter!

Error: Please check your email address.

Tags U.S. Securities and Exchange Commissionregulationsecuritydata breachFireEyegovernment

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Martyn Williams

IDG News Service
Show Comments

Most Popular Reviews

Latest News Articles


GGG Evaluation Team

Kathy Cassidy


First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.

Anthony Grifoni


For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.

Steph Mundell


The Fujitsu LifeBook UH574 allowed for great mobility without being obnoxiously heavy or clunky. Its twelve hours of battery life did not disappoint.

Andrew Mitsi


The screen was particularly good. It is bright and visible from most angles, however heat is an issue, particularly around the Windows button on the front, and on the back where the battery housing is located.

Simon Harriott


My first impression after unboxing the Q702 is that it is a nice looking unit. Styling is somewhat minimalist but very effective. The tablet part, once detached, has a nice weight, and no buttons or switches are located in awkward or intrusive positions.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?