News: 1649104284

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Mandiant shareholder sues to block $5.4b Google deal

(2022/04/04)


A Mandiant shareholder has launched a legal challenge to block Google's $5.4 billion takeover of the threat intelligence firm.

According to a lawsuit filed in a New York federal district court by shareholder Shiva Stein, Mandiant made "materially incomplete and misleading" statements to investors in financial documents filed with the US Securities and Exchange Commission (SEC) about the [1]planned acquisition .

On March 31, the cybersecurity company filed a proxy statement

[2]PDF

with the SEC about the Google deal. Mandiant also distributed financial documents to shareholders and recommended they vote in favor of the transaction, under which Mandiant will become a wholly-owned Google subsidiary.

[3]

As per the terms of the deal, each Mandiant stockholder will receive $23 for each share owned. Today, the stock is $22.40 apiece, and was about $19.38 before word of the takeover emerged in early March.

[4]

[5]

However, Mandiant's financials submitted to the SEC don't disclose the whole picture, the lawsuit alleges.

Mandiant published new research about the FIN7 cybercrime ring that suggests multiple other crews have merged with FIN7 this year as the gang likely moves into ransomware to monetize its attacks.

Despite [6]arrests in 2018 and related [7]sentencing of FIN7 member and Ukranian national Fedir Hladyr in 2021, the Eastern-Europe based crime gang has remained active and even honed their skills, according to the threat intel firm.

"Throughout their evolution, FIN7 has increased the speed of their operational tempo, the scope of their targeting, and even possibly their relationships with other ransomware operations in the cybercriminal underground," Mandiant threat researchers [8]wrote .

The miscreants continue to use PowerShell in their attacks: "There is no doubt about it, PowerShell is FIN7's love language," according to the blog. And this includes a new backdoor dubbed Powerplant, which the group has developed over the past two years.

Additionally, extortion tactics or ransomware deployment following security incidents attributed to FIN7 suggest the cybercrime ring has moved into ransomware.

Specifically, Mandiant's management team along with financial advisors at Goldman Sachs prepared a set of non-public financial forecasts for Mandiant's board of directors about the cybersecurity company's valuation, the lawsuit claimed. These numbers, which investors may well be interested in or need, didn't make it into the public proxy statement, we're told.

"Accordingly, the proxy statement should have, but fails to provide, certain information in the projections that Mandiant management provided to the Board and the financial advisors," according to the lawsuit.

Stein asked the court to force Mandiant to disclose the missing financial information to its shareholders before they vote on the deal, and to prevent Mandiant from moving forward with the planned acquisition until shareholders can review the non-public financials.

[9]Google buys threat intel giant Mandiant for $5.4bn

[10]FireEye sold to McAfee's new owners for $1.2bn as Mandiant split into standalone firm again

[11]Google: Russian credential thieves target NATO, Eastern European military

[12]Skyhigh Security rises from McAfee-FireEye's SSE

Google and Mandiant [13]announced the acquisition on March 8. If finalized, the deal will be one of Google's largest, coming in second to its [14]$12.5 billion purchase of Motorola phone division Mobility in 2011.

The news of the proposed $5.4 billion purchase followed media reports that Microsoft had tried unsuccessfully to buy the threat intel giant.

[15]

Google has been working to unseat Microsoft as the No. 2 cloud provider and trying to use its security tool chest to bring more enterprise customers onto its cloud — and off of Microsoft Azure and Amazon Web Services.

Successfully closing the Mandiant deal would be a big win for Google in this regard. But it could go off the rail if regulators or the courts intervene.

Google did not immediately respond to The Register 's request for comment about the lawsuit. ®

Get our [16]Tech Resources



[1] https://www.theregister.com/2022/03/08/google_buys_mandiant_5_4bn_dollars/

[2] https://d18rn0p25nwr6d.cloudfront.net/CIK-0001370880/b4621195-4e0e-444c-a3e0-f226a5d50cbf.pdf

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YktqlEEFWu@icQbScPS@GQAAANg&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YktqlEEFWu@icQbScPS@GQAAANg&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YktqlEEFWu@icQbScPS@GQAAANg&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[6] https://www.justice.gov/opa/pr/three-members-notorious-international-cybercrime-group-fin7-custody-role-attacking-over-100

[7] https://www.justice.gov/usao-wdwa/pr/high-level-organizer-notorious-hacking-group-fin7-sentenced-ten-years-prison-scheme

[8] https://www.mandiant.com/resources/evolution-of-fin7

[9] https://www.theregister.com/2022/03/08/google_buys_mandiant_5_4bn_dollars/

[10] https://www.theregister.com/2021/06/03/fireeye_sold_stg_1_2bn_dollars_mandiant/

[11] https://www.theregister.com/2022/04/01/russian_credential_phishing/

[12] https://www.theregister.com/2022/03/22/skyhigh_security_mcafee_fireeye_sse/

[13] https://www.theregister.com/2022/03/08/google_buys_mandiant_5_4bn_dollars/

[14] https://www.theregister.com/2011/08/15/google_buys_motorola_mobility_wtf/

[15] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YktqlEEFWu@icQbScPS@GQAAANg&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[16] https://whitepapers.theregister.com/



Eggheads unite! You have nothing to lose but your yolks.
-- Adlai Stevenson