It would have to be a Denial Of Service (DOS) attack on the NYSE web server. They risk getting caught if they login and do something nasty especially since they have announced intent to do harm.
I doubt the threat is real. Preempting an attack only gives the FBI more resources to catch the perpetrators.
