Trump signs memo calling for cyber privateers to conduct cyberattacks abroad against criminal groups targeting Americans — but they have to escrow $1 million to join | Tech Radar
Overview
News, deals, reviews, guides and more on the newest computing gadgets
Start exploring exclusive deals, expert advice and more
Details
Unlock and manage exclusive Techradar member rewards.
Unlock instant access to exclusive member features.
Get full access to premium articles, exclusive features and a growing list of member rewards.
Trump signs memo calling for cyber privateers to conduct cyberattacks abroad against criminal groups targeting Americans — but they have to escrow $1 million to join
Trump wants cyber privateers to attack foreign criminal groups
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.
US government to allow private firms to conduct legal cyberattacks on foreign organizations targeting Americans
Firms will be allowed to disrupt and destroy physical and virtual information systems and networks
US victims of cyber scams and fraud lose around $20,000
President Trump has signed a memo which allows private US firms to partner with the US government in operations designed to surveille and disrupt Transnational Criminal Organizations (TCOs).
According to the memo, the partnership “will enhance our ability to counter TCO threats and combat transnational cybercrime, fraud, and other predatory schemes against American citizens,” essentially turning private companies into privateers with the ability to launch cyber attacks against foreign entities.
The memo marks a significant shift in how the US tackles foreign cybercrime. “American businesses’ innovative capabilities have historically been underutilized in efforts to identify and disrupt criminal networks operating in cyberspace,” the memo states. But what does this actually mean in practice?
The US is the most targeted country in the world for cyber attacks and cybercrime, with 6.7 million victims losing
The program will effectively create a global cyber surveillance network that acts as an early warning system against attacks targeting critical national infrastructure, such as the recent Iranian attacks targeting over 30 US water systems. Private companies that “discover an imminent cyber-attack against United States critical infrastructure” will be required to notify the National Coordination Center (NCC).
New Trump executive order requests AI companies 'voluntarily' allow the White House to test the "advanced cyber capabilities of AI models”
"$10.22 million and counting": US cyber breaches have become a boardroom issue
First VPN administrators sanctioned by US Treasury over ransomware attacks
The US government isn’t just looking to work alongside the big tech companies. Big companies will be part of the picture to “provide critical capacity,” but smaller companies will also have the opportunity to become involved with the program as they are “more agile,” and “may be better suited for specialized or discrete tasks.”
When a threat is detected, private companies will put together a “cyber operations package” to be reviewed and approved by the Program Executive Directors. These packages will likely include plans for surveillance and offensive cyber operations.
Private companies looking to become part of the program will be vetted according to government guidelines, and will have to operate within a set of operating procedures under the oversight of the federal government. “No operation may be approved unless it complies with these operating procedures,” the memo says.
There is however a caveat that those involved within the program must “maintain a bond or escrow in an amount not less than $1 million,” which would be forfeit should a private company “enter non‑compliance with its contractual agreement.”
The memo also sets our parameters to prevent private companies from accidentally or intentionally targeting US citizens, or US information systems at home and abroad, with the company required to “cease such operation, conduct minimization procedures, and immediately notify the NCC,” in the event that a company “discovers operational activity exceeding the parameters and restrictions of the cyber operation”.
White House launches 'Gold Eagle' cybersecurity clearinghouse to share and patch AI-discovered software flaws
'It's possible to meet these types of timelines': Trump signs executive orders for quantum computer to be built by 2028
'It would make 'em rich': Trump looks to secure government stake in US AI giants
Additionally, “any activity authorized by the Program must be conducted subject to the oversight, operational control, and legal authorities of the United States Government”.
The memo is the latest step in the Trump administration’s efforts to allow private companies to legally launch cyberattacks on behalf of the US government. “The American private sector is the most innovative and technologically advanced in the world, and its scale, speed, and capacity secure a critical offensive cyber advantage for the United States,” the memo states.
The program will also put together a report on its progress every year, as well as reviewing the performance of each private company within the program within the same time frame.
Follow Tech Radar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.
Benedict is a Senior Security Writer at Tech Radar Pro, where he has specialized in covering the intersection of geopolitics, cyber-warfare, and business security.
Benedict provides detailed analysis on state-sponsored threat actors, APT groups, and the protection of critical national infrastructure, with his reporting bridging the gap between technical threat intelligence and B2B security strategy.
Benedict holds an MA (Distinction) in Security, Intelligence, and Diplomacy from the University of Buckingham Centre for Security and Intelligence Studies (BUCSIS), with his specialization providing him with a robust academic framework for deconstructing complex international conflicts and intelligence operations, and the ability to translate intricate security data into actionable insights.
You must confirm your public display name before commenting
‘If it was opt in, nobody would opt in’: Amazon’s AI is being trained on your Twitch streams unless you turn it off — here’s how to stop it
Trump signs memo calling for cyber privateers to conduct cyberattacks abroad against criminal groups targeting Americans — but they have to escrow $1 million to join
After taking on Whoop, Garmin could come for Oura with its own smart ring — and as a Garmin fan, these are the 3 features I want to see
Proton VPN rolls out Rust-powered 'Proton Protocols' in beta across all major apps
Not thrilled by the new Google Pixel Watch 5? Here are 3 Android smartwatches we recommend instead, based on our own testing data
Tech Radar is part of Future US Inc, an international media group and leading digital publisher. Visit our corporate site.
© Future US, Inc. Full 7th Floor, 130 West 42nd Street, New York, NY 10036.
Key Takeaways
- News, deals, reviews, guides and more on the newest computing gadgets
- Start exploring exclusive deals, expert advice and more
- Unlock and manage exclusive Techradar member rewards
- Unlock instant access to exclusive member features
- Get full access to premium articles, exclusive features and a growing list of member rewards
