US to let vetted private firms conduct offensive cyberattacks on criminal groups

Full text

Credit: Ryan Haines / Android Authority

TL;DR

The US is creating a program that lets vetted private companies conduct offensive cyber operations against foreign criminal groups.

Operations will require federal approval and supervision, with participating firms potentially putting up at least $1 million in escrow.

The policy marks a major shift from the US stance that private companies can defend against hackers but not attack them.

If you thought cybersecurity companies were supposed to keep hackers out rather than go looking for a fight, the US government begs to differ. A new presidential memorandum will allow vetted American companies to conduct offensive cyber operations against foreign criminal groups , provided the government calls the shots.

As reported by TechCrunch , the Trump administration’s memorandum sets up a federal program under which private companies could conduct both surveillance and disruptive cyber operations against foreign cyber-enabled criminal organizations. The aim is to tackle threats such as ransomware, fraud, and other cybercrimes targeting Americans.