Yep, it does work. The Rustock trojan did it. Secureworks analyzed how the spammers behind Rustock were manipulating the stocks to generate money. And it looks like it works.

from secureworks