Trump Authorizes US Companies to Launch Cyberattacks Against Hackers

President Donald Trump has authorized vetted American corporations to launch offensive cyber operations against foreign criminal syndicates, upending decades of federal security doctrine that strictly confined offensive digital warfare to military and intelligence agencies.

The directive, signed late Wednesday under a presidential national security memorandum, allows approved commercial firms to disrupt, manipulate, or dismantle digital infrastructure used by transnational cybercriminals.

Under the framework, participating enterprises will coordinate with the Justice Department and the Department of Homeland Security to conduct offensive maneuvers and deep-network surveillance, according to The New York Times.

The White House intends to harness the technical capacity of commercial entities to counter the spiraling economic fallout from ransomware and illicit digital intrusions.

A Guarded Authorization Framework

The White House initiative does not establish an unregulated digital arena. Access to the program requires rigorous federal screening, formal interagency contracts, and prior written authorization from law enforcement and homeland security leadership before any strike can proceed.

Contract terms subject participating commercial operators to $1 million fines for protocol violations.

The mandate explicitly prohibits actions that could cause loss of life, inflict bodily injury, or cross the legal threshold into armed conflict under international law.

Amanda Naylor, director of cyberpolicy at the National Security Council, stated that the memorandum would "give the United States new tools to protect Americans from cybercrime and fraud."

Following in Russian and Chinese Footsteps

Security analysts and former intelligence officials have warned that the initiative introduces profound operational and geopolitical risks, particularly regarding the misidentification of targets.

Disentangling independent criminal networks from state-sponsored espionage entities remains an acute challenge.

Foreign powers often mask state operations behind criminal proxies or employ commercial cyber gangs for side operations.

"Just how difficult attribution in criminal operations is, and how few organizations can repeatably do it right," remains the primary vulnerability in privatized offensive action, noted Nick Carr, threat intelligence lead at Microsoft.

The shift brings American policy into closer alignment with adversary nations such as Russia and China, which have long utilized commercial contractor ecosystems to execute state-aligned offensive cyber objectives.

"Now it seems the U.S. is interested in copying China’s system for deputizing private-sector hackers," said Dakota Cary, a cybersecurity adviser at SentinelOne.

Legal Exposure

Former defense leadership noted that the existing military mechanisms for managing cyber campaigns are inherently strained.

"The current pace of cyberoperations is unsustainable for just the military," said Mieke Eoyang, a former Pentagon cyber official.

Corporate legal advisors, however, caution that participating businesses face unprecedented legal liability, disclosure requirements, and exposure to foreign retaliation if their commercial systems engage in government-sanctioned digital strikes.