The Trump administration has launched a new federal program allowing vetted private companies to conduct offensive cyber operations against foreign criminal groups under strict government supervision and approval.

Key Points

• Participating firms may be required to place at least $1 million in escrow to ensure compliance with federal regulations.
• Operations are authorized to disrupt, degrade, or destroy foreign computer systems used for ransomware, fraud, and other cybercrimes.
• The Justice Department and the Department of Homeland Security will oversee all activities and provide written authorization for every mission.
• Companies must immediately cease and report any operations that inadvertently target United States citizens or domestic computer systems.
• Officials have been granted a 60-day window to finalize the specific operating procedures and legal guardrails for the program.

Why it Matters

This policy represents a significant shift in national cybersecurity strategy by moving private firms from a defensive posture to an active, offensive role. The program raises complex legal and geopolitical questions regarding the potential for international retaliation against American companies and their employees.