US Lawmakers Urge Ban on Hack-for-Hire Firms

Key facts

• A bipartisan group of U.S. lawmakers has asked the government to ban three Indian hack-for-hire firms: BellTroX, CyberRoot, and Sunkissed Organic Farms (formerly Appin).
• The lawmakers accuse these firms of conducting cyberattacks and espionage against Americans for over a decade, stealing data and manipulating litigation.
• They are also accused of an aggressive censorship campaign to suppress public awareness of their activities.
• The request was made via a letter to U.S. Secretary of Commerce Howard Lutnick, urging their addition to the Commerce Department's economic sanctions entity list.
• The lawmakers stated the firms operated at the behest of the Qatari government and targeted a former senior Republican lawmaker.

A bipartisan coalition of U.S. lawmakers has formally requested the U.S. government to ban three Indian hack-for-hire firms, citing their alleged involvement in cyberattacks and espionage targeting Americans. Senators Ron Wyden (D-Ore.) and Sheldon Whitehouse (D-R.I.), along with Congressman Pat Harrigan (R), sent a letter to Commerce Secretary Howard Lutnick urging the addition of BellTroX, CyberRoot, and Sunkissed Organic Farms (formerly Appin) to the Commerce Department's entity list.

The entity list effectively prohibits U.S. businesses from engaging in transactions with the named companies, thereby restricting their access to essential technology such as software licenses and cloud infrastructure. The lawmakers contend that these firms have been conducting cyberattacks and espionage against Americans, business owners, and their legal representatives for over a decade, aiming to manipulate ongoing litigation and suppress public awareness of their activities.

These mercenary hacking companies are accused of stealing data from thousands of Americans and orchestrating an "aggressive censorship campaign." The lawmakers highlighted that this coordinated effort allows foreign entities to leverage foreign courts to conceal cyber threats from the American public and infringe upon the constitutional rights of U.S. citizens. The request follows extensive media investigations into the hack-for-hire industry, detailing how hackers are paid to infiltrate systems for legal or influence advantages.

One of the implicated companies, Appin, previously obtained a global court order from an Indian court compelling Reuters to remove reporting on the firm, though the report was later republished after the order was lifted. The digital rights group Electronic Frontier Foundation has also defended news organizations against legal threats from Appin. The lawmakers' letter further alleges that these hack-for-hire companies operated under the direction of the Qatari government, with targets including a former senior Republican lawmaker. Appin has previously been linked to Qatar in relation to cyberattacks against FIFA officials.