US Allows Private Firms to Launch Cyberattacks

The US government has announced a major change in its cyber policy, allowing private companies to carry out cyberattacks against international criminal gangs and hackers. This move marks a significant shift in the US government's approach to combating cybercrime, and is aimed at leveraging the capability and innovation of the private sector to combat cybercrime.

The program, which will be overseen by the Department of Justice and Department of Homeland Security, will enable vetted private companies to conduct surveillance and disruptive attacks against foreign cyber-enabled transnational criminal organizations. These organizations are involved in a range of cybercrimes, including ransomware, phishing, financial fraud, sextortion, and impersonation scams.

Participating companies will undergo rigorous vetting and be subject to strict operational procedures. They will be required to deposit $1 million in escrow, which will be forfeited if the government finds out a company isn’t complying with its rules. The program will be overseen by the National Coordination Center, which was established in an earlier Trump administration executive order.

The targets of the program will include groups involved in ransomware, phishing, financial fraud, sextortion, and impersonation scams. These groups have been responsible for significant financial losses, with the cost of cybercrime to Americans estimated to be nearly $21 billion last year, according to the White House.

## What it means The program marks a significant shift in the US government's approach to combating cybercrime. Previously, private companies were only allowed to defend their own networks from cyberattacks, but were not allowed to launch their own attacks against hackers. This change in policy is aimed at allowing private companies to use their expertise and resources to help combat cybercrime.

## Why it matters The move is significant because it recognizes the growing threat posed by cybercrime and the need for a more proactive approach to combating it. By allowing private companies to carry out cyberattacks against international criminal gangs and hackers, the US government is hoping to disrupt and dismantle these organizations and reduce the financial losses caused by cybercrime. The program is also likely to face legal challenges and opposition from critics, who have argued that private companies should not be involved in government hacking operations.

The program is still in its early days, and the government has not yet fully established how it will operate. However, it is clear that the US government is taking a more aggressive approach to combating cybercrime, and is willing to work with private companies to achieve this goal.