US Government Authorizes Private Firms to Fight Cybercriminals

The United States government has officially launched a new program that allows private security firms to carry out cyberattacks against overseas criminal groups. According to a presidential memorandum issued by the Trump administration, these private companies will work under the control and oversight of federal agencies. This move marks a major change in how the US handles cybercrime, as it is the first time the government has authorized private businesses to perform offensive cyber operations against hackers based in other countries.

This initiative follows plans that were first reported last year. The goal is to use the skills of the private sector to fight groups that commit crimes such as ransomware—a type of software that locks a user's files until they pay money—as well as financial fraud and phishing campaigns. The Department of Justice and the Department of Homeland Security will be responsible for managing these firms. To participate, companies must prove they have high technical skills and must hold a bond of at least $1 million, which they will lose if they break their agreement with the government.

Ars Technica reports that the program targets "cyber-enabled" criminal organizations. These are defined as foreign groups that attack US interests but are not part of an official foreign government. The memo suggests that private firms could use various methods to disrupt these criminals, including spyware or attacks that lock the criminals out of their own computer systems. Previously, the government did not allow private companies to take such actions without special permission from a court.

While the government describes private businesses as an "underutilized" force in the fight against crime, the plan has faced significant criticism from experts. One major concern is the difficulty of identifying who is truly behind a cyberattack. Ben Bernstein, a manager at Huntress, explained to The Verge that criminals often hide their activities by using innocent networks, such as those at hospitals or small businesses. Because of this, Bernstein warned that it is "practically impossible" to strike back at the real criminals without accidentally damaging the systems of innocent people.

There are also serious legal and safety concerns for the people working at these private firms. Jason Healey, a researcher at Columbia University, told Cybersecurity Dive that anyone participating in these operations faces "substantial personal legal risk." Furthermore, Jake Williams, a vice president at Hunter Strategy, noted in a report by TechCrunch that Americans involved in these cyberattacks could be seen as "non-uniformed combatants" if they travel to other countries. This could put them in danger of being treated like soldiers in a war rather than private citizens.

Another challenge is the risk of accidental conflict with foreign nations. As Cybersecurity Dive pointed out, it is often very hard to tell if a criminal group is acting alone or if they have ties to a foreign government. If a private firm accidentally attacks a group that is actually supported by a foreign state, it could lead to serious legal or political problems for the United States. Despite these warnings, the administration maintains that it is necessary to use all available tools to protect the country from growing digital threats.

As the program begins, the government will need to carefully manage the balance between fighting crime and avoiding international trouble. The success of this policy will depend on how well the federal agencies oversee these companies and how accurately they can identify targets. For now, the cybersecurity industry and legal experts are watching closely to see how these private operations will affect global security and the safety of those involved.