US firms to be allowed to strike back in cyberattacks

The U.S. government is moving to officially authorize American companies to engage in offensive cyber operations against online criminals, a significant shift from current defensive measures. President Donald Trump has issued an order to establish the rules and procedures for such a program, empowering selected firms to not only monitor but also actively disrupt the activities of international criminal hacking groups.

Under the new directive, participating companies will operate under government supervision. To be eligible, they must secure clearance from the Departments of Justice and Homeland Security. Additionally, they are required to deposit at least one million dollars as security against potential violations. Crucially, the program explicitly prohibits attacks that could lead to loss of life or be considered the use of force under international law.

Furthermore, the order stipulates that attacks should only target groups unaffiliated with foreign governments. This distinction is intended to avoid escalating conflicts with state-sponsored hacking operations, which are often used by countries like China, Russia, or North Korea. However, cybersecurity experts have expressed concerns to The New York Times that making such distinctions in practice could prove difficult, as attackers frequently obscure the origins of their operations.

Tech companies already play a vital role in combating online crime, primarily through defensive strategies. This new initiative represents a more aggressive stance, allowing private entities, under strict governmental oversight, to take the fight directly to cybercriminals. The program aims to create a more robust defense mechanism by enabling companies to actively neutralize threats before they can cause significant damage.