Cybercriminals in Russia have stolen tens of millions of dollars from U.S. 401(k) accounts, the
“You could wake up one morning and find all your money in your retirement account or in your trading account is gone,” said SEC Internet enforcement chief John Reed Stark.
The people who have hacked into these accounts cash out the balances and either wire the money to their own account or quickly buy and sell shares in worthless stock they control. In many cases, they have obtained users’ identities and passwords when they used public Internet portals at hotel business centers and other sites.
Similar schemes have taken place in India, Hong Kong and Malaysia, according to regulators.