© Copyright Acquisition International 2025 - All Rights Reserved.

Article Image - Cyber Criminals Target M&A  Negotiations
Posted 22nd June 2015

Cyber Criminals Target M&A Negotiations

We hear from Stuart Poole-Robb, Chief Executive of the security, business intelligence and cyber security adviser, the KCS Group Europe.

Mouse Scroll AnimationScroll to keep reading

Let us help promote your business to a wider following.

Cyber Criminals Target M&A Negotiations
Image

Cyber Criminals Target M&A Negotiations

We hear from Stuart Poole-Robb, Chief Executive of the security, business intelligence and cyber security adviser, the KCS Group Europe.

Industry predictions that a growth in the number of merger and acquisitions (M&A) deals would attract the unwanted attention of international organised criminal gangs (OCGs) are proving correct.

Last year, Ernst & Young (now known as EY) predicted that, as M&A activity increases, there will be more scope for cyber criminals to use increasingly sophisticated malware of the kind that is available on the Dark Web to influence the negotiation strategies and pricing of major transactions, either working directly for a party on either side of the transaction or simply as observers taking positions based on the outcomes.

Large law firms are now being targeted by OCGs, particularly during M&A discussions, where the legal firm and the negotiating parties typically open their systems to each other whilst transmitting vast amounts of confidential data to one another over the Internet. Former low-level hackers have also become increasingly ambitious in the last 12 months as the internet’s mirror economy, the Dark Web, has become an increasingly sophisticated marketplace for stolen data.

“We’re all used to criminals stealing identities and credit card information to sell on the black market. But in recent years, as more and more of this information has flooded the market, the price earned per record has dropped to the level where it’s not worth stealing any more,” says Jamie Graves, chief executive of cyber security software developer ZoneFox, a partner of KCS Group Europe.

He adds: “As a result, criminals are targeting organisations with other, higher value, information. This can be seen in the recent spate of healthcare breaches, and it will also be a trend in the legal sector, where security is traditionally relaxed, but a great deal of very sensitive information can be stolen for the purpose of blackmail, fraud, and other activities.”

OCGs are also realising that sensitive information at a corporate level has a very real market value to many large corporates, who do not always to enquire too closely into how such market-sensitive data was originally obtained.

According to Graves: “Certain unscrupulous corporates have also realised that legal practices are honeypots for extremely sensitive information that can be used to inform them of commercial matters that, should they be disclosed, would have a significant effect on legal proceedings, a merger or acquisition, or other commercially sensitive activities.”

This kind of cyber breach is far harder to detect and prosecute than, for example, a cyber-breach that is followed directly by a fraudulent funds transfer. By appearing to conduct legitimate industry research for a major organisation involved in potential M&A negotiations, the OCG can seem to be involved in a legitimate business activity; this is a process known as ‘data laundering’. Should the OCG decide to profit from the illegally obtained information by insider market trading on its own account, the crime is hard to detect and even harder to prosecute, particularly in the case of criminals based in a country which may be on a different continent from the city where the cyber breach occurred.

Law firms are now seen as particularly vulnerable to this type of attack as large organisations in other sectors, such as finance, start to shore up their cyber defences.

“Legal firms need to wise up to the fact that threat-actors are going after valuable low-hanging fruit, and, since the banks have been investing a great deal in security, their practices are likely to be next,” says Jamie Graves.

Some legal firms are already not only improving their own IT security but are also realising that a crucial part of their role is helping clients deal with the growing security risk now associated with situations such as M&A negotiations.

According to Andrew Cheung, General Counsel UKMEA at global law firm Dentons: “The global risks that our clients need to tackle are increasing in complexity, variety, impact and number. To meet these increasingly complex risks, clients should be able to demand more than simply good legal advice from their lawyers. Dentons recognises that we also need to consider the success of our clients’ projects, goals and transactions as a whole.”

Many law firms, however, still live in a state of blissful ignorance as to the growing level of risk they and their clients face from cyber criminals. While the malware used by OCGs has become increasingly sophisticated over the past 12 months, the legal profession overall has not generally managed to keep pace.

The OCGs themselves now deploy malware variants that are routinely sold on the Dark Web, where all kinds of illegal services and goods are available – at a price. According to Russia-based research organisation Kaspersky Labs, cyber criminals are now developing over 300,000 new and unique variants of malware every day. In Russia alone, the market in this type of illicit malware is reported be worth around US$2 billion a year. OCGs are also taking increasing advantage of the fact that the Russian authorities are unwilling to prosecute anyone inside Russia for cyber breaches that occur elsewhere.

According to Interpol: “Traditional OCGs, including those with a mafia-style structure, are beginning to use the service-based nature of the cybercrime market to carry out more sophisticated crimes, buying access to the technical skills they require.” In some cases, even trained state cyber experts in some countries are being encouraged to moonlight, knowing full well they won’t be caught or prosecuted.

Too many legal firms still rely on old-fashioned anti-virus and password protection. This is essentially 20th Century security that stands little or no chance of stopping a determined and co-ordinated cyber attack using modern malware, which often sits undetected on an IT system for months or even years.

Law firms and their corporate clients therefore need to deploy cyber security software capable not only of recognising incoming threats, but also detecting whether an IT system has already been compromised and whether confidential and market- sensitive data is already being put up for sale on the Dark Web.

Categories: Innovation


You Might Also Like
Read Full PostRead - Eye Icon
How Machine Learning Is Transforming Financial Risk Management
News
26/07/2024How Machine Learning Is Transforming Financial Risk Management

Machine learning (ML) is leaving a market on all sorts of everyday business practices, and the wrangling of financial risks is one of the most noteworthy examples of how this tech can make a difference.

Read Full PostRead - Eye Icon
Getronics Wins Five Year Contract with AGS Airports to Deliver IT Support Services
Finance
28/01/2016Getronics Wins Five Year Contract with AGS Airports to Deliver IT Support Services

Getronics, the global ICT services group, today announced it has won a five-year deal with AGS Airports Limited, the owner of Aberdeen, Glasgow and Southampton airports, to undertake IT support services as AGS separated from Heathrow Holdings.

Read Full PostRead - Eye Icon
Should You Fund Your Startup With Personal Credit Cards? Pros, Cons & Key Considerations
News
17/08/2022Should You Fund Your Startup With Personal Credit Cards? Pros, Cons & Key Considerations

Getting a new business off the ground when you don’t have the necessary capital saved up can be quite tricky. Risk capital sources such as angel investors, and VCs give a hard pass to the large majority of small businesses, unless they have breakthrough idea

Read Full PostRead - Eye Icon
Monster Worldwide Recommends Stockholders Tender Into Randstad Offer
Finance
03/10/2016Monster Worldwide Recommends Stockholders Tender Into Randstad Offer

MNG's Consent Solicitation is an Attempt to Derail the Randstad Offer and Take Control of the Company Without Paying a Control Premium

Read Full PostRead - Eye Icon
Acton Mobile Acquires Mobile Mini’s Mobile Office Fleet
M&A
22/04/2015Acton Mobile Acquires Mobile Mini’s Mobile Office Fleet

Acton Mobile announced today it has entered into an agreement to acquire the mobile office fleet of Mobile Mini. The acquisition further enhances Acton Mobile’s geographic capabilities and its strategy to more effectively help customers in a wide range of in

Read Full PostRead - Eye Icon
B2B eCommerce Platform: How to Choose?
News
04/11/2022B2B eCommerce Platform: How to Choose?

eCommerce has become an essential part of doing business. No matter what kind of B2B company you have, it's critical to be able to reach out to customers online. You can do just that with a B2B eCommerce platform.  Whether you're selling products or services,

Read Full PostRead - Eye Icon
37% of businesses say apprentices will be top source of talent
Innovation
12/02/201837% of businesses say apprentices will be top source of talent

37% of businesses say apprentices will be top source of talent in 2018, survey finds

Read Full PostRead - Eye Icon
Coinsilium Purchase of own Shares with Cash and Cryptocurrency
Finance
15/03/2018Coinsilium Purchase of own Shares with Cash and Cryptocurrency

Coinsilium Group Limited (NEX: COIN), the blockchain venture builder, advisor and investor that finances and manages the development of early-stage blockchain technology companies, is pleased to announce that on 7 March 2018, the Company completed the purchase

Read Full PostRead - Eye Icon
How To Give An Effective Business Presentation
Leadership
10/08/2021How To Give An Effective Business Presentation

A corporate presentation should have an interesting subject given with passion. Here we look at what can make your presentation stand out and give you that edge.



Our Trusted Brands

Acquisition International is a flagship brand of AI Global Media. AI Global Media is a B2B enterprise and are committed to creating engaging content allowing businesses to market their services to a larger global audience. We have 14 unique brands, each of which serves a specific industry or region. Each brand covers the latest news in its sector and publishes a digital magazine and newsletter which is read by a global audience.

Arrow