'Gotta give it him, pretty damn smart move, however very stupid not realizing he could have much more legitimately.'
Totally disagree! It was a pretty dumb move given that once account holders reported password intrusion, mere 1-2-3 steps in SEC investigation would have found that someone was 'pumping and dumping' the stock. Rest would have been the chase of the ISP address and it was only a matter of time the guy would have been caught.
Russians are good at computers so hacking into websites is what you credit them with. Rest was pretty foolish and wanting to be caught eventually was written all over this scheme.