Cybercrime: US empowers private companies to counter hackers

The U.S. government has announced a new strategy allowing private companies to take part in counterattacks against cybercriminals, marking a significant shift in its approach to cybersecurity. This policy, introduced under President Donald Trump’s administration, enables businesses to collaborate with federal agencies such as the Department of Justice and the Department of Homeland Security in targeting cyber threats. The move comes amid growing concerns over ransomware attacks and other forms of digital crime that have increasingly targeted corporations, public institutions, and critical infrastructure. According to reports from U.S.-based journalists, this change represents a departure from previous practices where state-run intelligence services and military units were primarily responsible for responding to cyber threats. Under the new framework, private entities will be permitted to engage directly in offensive operations against cybercriminal networks, though they must work under the supervision of designated federal authorities. The initiative was outlined during discussions with local media outlets, including Perfil, where journalist Norman Powell explained how the policy aligns with broader efforts to combat cybercrime more aggressively. Previously, the U.S. had maintained a strict separation between private-sector involvement and direct action against cyber threats. However, the new directive allows selected private firms to participate in coordinated strikes against malicious actors. These firms would operate under the oversight of the Department of Justice and the Department of Homeland Security, ensuring that all actions remain within legal boundaries. The decision reflects a growing recognition of the scale and complexity of modern cyber threats, which often require rapid and adaptive responses beyond traditional law enforcement capabilities. The policy has raised concerns among experts regarding potential international repercussions. Some analysts warn that the U.S. move could trigger a broader escalation in cyber conflicts, particularly given that countries like China and Russia have long allowed private entities to play a role in cyber operations. Powell noted that there is apprehension that increased U.S. activity could provoke retaliatory measures from other nations, potentially leading to a destabilizing cycle of cyber retaliation. He emphasized that while the focus is currently on disrupting ransomware schemes and other financial crimes, the implications extend far beyond economic harm. Critical infrastructure systems, such as power grids, water treatment facilities, and transportation networks, are also at risk. Cybersecurity experts have warned that these systems are increasingly vulnerable to sophisticated attacks that can disrupt essential services. Powell highlighted that the evolving nature of cyber threats means that the lines between criminal activity and national security are becoming harder to define. As a result, the U.S. is seeking to broaden its response mechanisms to include both public and private sectors in addressing these challenges. The implementation of this policy will likely involve careful coordination between federal agencies and participating private firms. While specific details about which companies will be eligible remain unclear, the process is expected to follow rigorous vetting procedures. The goal is to create a more dynamic and responsive system capable of countering emerging cyber threats before they escalate into major incidents. As the policy takes shape, further developments are anticipated, particularly in terms of how it will interact with existing international norms and agreements governing cyberspace.