U.S. Authorizes Private Security Firms to Conduct Offensive Cyber Operations
In a historic move, the U.S. government has authorized private security firms to conduct offensive cyber operations against overseas cybercriminals. This decision, formalized through a National Security Presidential Memorandum signed by President Trump, marks a pivotal shift in how the federal government engages with cyber threats. Traditionally, private companies have been limited to defending their own networks, but now they can actively disrupt and dismantle criminal infrastructures abroad.
The initiative allows vetted security firms to surveil, disrupt, and even destroy the operations of foreign cyber-enabled transnational criminal organizations that pose threats to U.S. citizens, businesses, and government entities. The White House has identified specific threats such as ransomware, phishing, financial fraud, sextortion, and impersonation scams as primary targets for these operations.
The program will be managed by the National Coordination Center within the Homeland Security Task Force, with oversight from both the Department of Justice and the Department of Homeland Security. Companies wishing to participate must contract with one of these departments and undergo a rigorous vetting process that assesses their technical capabilities, operational experience, and security measures.
New operational guidelines are expected to be established within 60 days, ensuring that both large corporations and smaller specialized firms can engage in these activities. Authorized companies will have the ability to conduct covert cyber surveillance, which includes accessing systems without the owner's consent. They may also execute aggressive cyber operations that can manipulate, disrupt, deny, degrade, or destroy systems, networks, and data.
However, this memorandum does not grant a blanket license to hack. Each operation must receive written approval and remain under federal supervision. The guidelines prohibit actions that could lead to serious injury or death, and any accidental targeting of U.S. persons or systems must be reported immediately.
While empowering private firms to combat cybercrime may seem beneficial, there are inherent risks. Cybercriminals often use compromised systems belonging to innocent parties, raising concerns about potential collateral damage. Additionally, distinguishing between independent criminal organizations and those linked to foreign governments can be challenging, as the memorandum presumes independence unless proven otherwise.
Legal experts have expressed concerns that personnel involved in these operations could face legal repercussions abroad. There are also worries about escalation, unintended consequences, and the need for effective coordination among various government agencies.
The White House emphasized that this initiative is part of a broader strategy to combat foreign-based organized crime that exploits Americans in cyberspace, stating, "President Trump is unleashing every available tool to stop foreign-based organized criminal organizations that exploit Americans in cyberspace."
