Trump authorizes private firms to conduct cyberattacks on overseas criminals

President Donald Trump signed a National Security Presidential Memorandum on August 12, establishing a program that allows vetted U.S. private companies to conduct offensive cyber operations against foreign transnational criminal organizations. The initiative aims to enhance the government's ability to combat cybercrime, fraud, and other predatory schemes targeting American citizens.

Under the program, participating companies will operate under the direction and oversight of the Department of Justice and the Department of Homeland Security. To participate, firms must clear a vetting process and post a bond or escrow of at least $1 million, which can be forfeited if rules are broken.

The memorandum authorizes 'Cyber Surveillance Operations,' which involve accessing systems without owner permission or exceeding authorized access, as well as broader offensive actions against networks involved in ransomware, phishing, financial fraud, and sextortion. Operations that could cause 'Critical Outcomes' are barred, and any impact on U.S. persons or systems must cease immediately. The program's targeting rules are detailed in a classified annex, with implementation guidance due within 60 days.