The US has authorized companies to carry out cyberattacks against foreign criminals, according to the NYT
The U.S. government has authorized certain American companies to conduct offensive cyber operations against foreign cybercriminal groups. The relevant provisions are contained in a national security memorandum signed a few days ago by U.S. President Donald Trump.
According to the document, private companies will be able to cooperate with the U.S. Department of Justice and the Department of Homeland Security and, under certain conditions, carry out hacking operations against foreign cybercriminal groups.
To join the program, companies must:
- pass a preliminary screening;
- enter into a contract with the U.S. government that provides for a fine of up to $1 million for violating the established conditions;
- obtain written authorization from authorized officials at the Department of Justice and the Department of Homeland Security.
It is anticipated that program participants will be able to monitor the activities of cybercriminal networks and conduct certain types of offensive hacking operations.
Such actions could potentially disrupt or destroy information systems and networks, including virtual and physical infrastructure.
The White House stated that the new policy is intended to help combat cybercrime, particularly ransomware attacks.
At the same time, some former U.S. officials and cybersecurity experts warn of the risk of chaos and unpredictable consequences.
Previously, the conduct of “offensive cyber operations” in the U.S. was largely limited to military and intelligence agencies.
The new policy opens up access to such operations for certain private companies, but prohibits attacks that could result in death or serious injury.
This was reported by The New York Times.
Prior to this, Microsoft uncovered a new espionage campaign by the Russian group Midnight Blizzard. Hackers gain access to Wi-Fi networks in hotels and conference centers to steal passwords, files, and user accounts.
Meanwhile, Mark Heinrichmann, chairman of the Bundestag’s parliamentary oversight committee, has proposed granting German intelligence agencies the right to carry out preemptive cyberattacks against Russian drone manufacturers. He believes that such actions could serve as one of the tools to counter threats from Russia.