White House taps security firms for offensive hack-back operations

Key Points:

• President Donald Trump signed a White House memo directing the National Coordination Center (NCC) to create a program allowing private security companies to apply for approval to hack foreign cybercrime organizations.
• The program enables the NCC to leverage private sector capabilities for cyber operations targeting transnational criminal organizations under U.S. government control and authority.
• Rigorous procedures will ensure these operations comply with the U.S. Constitution, federal laws, and international agreements, with oversight by designated executive directors from the Justice and Homeland Security departments.
• Participating companies must be vetted, maintain a $1 million bond or escrow, immediately halt operations if unauthorized activities occur, and report to the NCC, ensuring accountability and compliance.
• The initiative aims to disrupt foreign criminal groups involved in ransomware, phishing, financial fraud, sextortion, and impersonation scams, addressing losses exceeding $20.8 billion reported by U.S. consumers in 2025.