The SEC sued 38 entities accused of using false adviser filings, nonexistent auditors and fake certificates to appear legitimate to investors.