Regulators want to better understand the threat posed by a “coordinated cyberattack on geographically distributed targets.”