US authorizes private companies to hack cybercriminals
New policy greenlights offensive operations against foreign threat actors under federal oversight.
1Policy shift
The US has issued a memorandum allowing private companies to conduct offensive cyber operations, marking a radical departure from previous defense-only policies. Approved firms can now target foreign cybercriminal groups, with each operation requiring federal approval. Participants must maintain at least $1 million in escrow as collateral. This represents a fundamental change in cybersecurity strategy.
2Operation scope
Vetted companies can conduct both surveillance and disruptive operations against transnational cybercrime networks. The program primarily targets ransomware groups and fraud operations affecting Americans. According to TechCrunch, the framework was developed during the Trump administration but is now being implemented. All operations will focus on criminal threats to US citizens and infrastructure.
3Industry impact
This decision creates a watershed moment for cybersecurity firms, enabling active threat hunting. However, it raises significant ethical and legal questions. Experts emphasize the need for strict government oversight of private sector offensive capabilities. The move could reshape global cybersecurity power dynamics, with private actors gaining unprecedented operational roles.
4Financial requirements
Companies must maintain a minimum $1 million escrow to participate, reflecting the program's high stakes. This financial commitment ensures accountability for operations. The amount may vary based on operational scale and risk assessment. Federal authorities will monitor compliance with financial and operational guidelines throughout each mission.
5Legal framework
The memorandum navigates uncharted legal territory regarding private sector offensive actions. While the government promises international law compliance, experts warn of potential diplomatic fallout. The program establishes strict chains of command to maintain legal boundaries. This represents the first formal authorization of private offensive cyber operations in US history.
6Ransomware focus
A key target is the exploding ransomware threat, which saw 94% growth in US attacks during 2022. The proactive approach aims to disrupt criminal infrastructure before attacks occur. Companies may target payment systems, command servers, or malware distribution networks. This marks a shift from reactive defense to active disruption of cybercriminal ecosystems.
7Industry reactions
Major cybersecurity firms have welcomed the new authorization, while some experts caution about risks of privatizing cyber warfare capabilities. Microsoft and other industry leaders are expected to join. Smaller firms may face challenges meeting the financial requirements. The first participants are anticipated to be announced in 2024 after thorough vetting.
8Global implications
The US move may inspire similar programs among allies, with NATO members reportedly considering comparable authorizations. Long-term, this could significantly expand private sector roles in cyber conflict. However, it also risks escalating non-state actor involvement in digital warfare. The policy could catalyze a new era of public-private cybersecurity cooperation worldwide.
Original article: Android Authority — ABD, özel şirketlere hackerları hackleme izni veriyor