Fortinet Launches Cybercrime Bounty Program to Enhance Accountability
Cybercrime has transformed into a global threat, with attackers collaborating across borders and leveraging advanced technologies like AI to outpace defenders. In response to this growing challenge, Fortinet Inc. has launched a cybercrime bounty program designed to harness human intelligence to aid law enforcement in making arrests rather than merely tracking malware and infrastructure. Derek Manky, chief security strategist and global vice president of threat intelligence at FortiGuard Labs, emphasized the importance of closing the accountability gap in the cybercrime landscape, which has become a significant economic force, rivaling the world's largest economies.
Manky highlighted that cybercriminals are increasingly working in conjunction with nation-state advanced persistent threats (APTs) and offering crime services that contribute to the third-largest GDP globally, which is attributed to cybercrime. The new bounty program, developed in partnership with Crime Stoppers International, aims to improve the attribution process, which is often the most challenging aspect of threat intelligence. By leveraging Crime Stoppers' established anonymous reporting network, the program extends its reach to cyber threats for the first time, allowing individuals to report tips anonymously.
Fortinet will validate and package the tips received before forwarding them to law enforcement agencies, which often struggle with unproductive leads. This initiative builds on Fortinet's Cybercrime Atlas, which has already facilitated over 2,000 arrests and recovered approximately $200 million for victims over the past three years. Manky pointed out that less than 1% of cyber crimes are prosecuted, and the goal of the bounty program is to increase this figure through a scalable and trustworthy reporting mechanism.
The rapid advancement of AI has further compressed the timeline for cybercriminal activities, with attackers now operating within windows of less than 20 hours and increasingly relying on autonomous agents instead of human operators. The program's inaugural operation, Silent Vector One, will specifically target ransomware networks, with future plans to address affiliate networks and crimes related to human trafficking and narcotics. Manky stated that the overarching aim of Silent Vector One is to illuminate the dark corners of cybercrime by applying robust threat intelligence to identify and bring perpetrators to justice.
This initiative represents a significant step in the ongoing battle against cybercrime, as Fortinet seeks to enhance accountability and foster collaboration between the tech industry and law enforcement agencies. As the program unfolds, it will be closely monitored for its effectiveness in addressing the pressing challenges posed by cybercriminals.
