The White House has issued a presidential memorandum authorizing vetted private companies to launch offensive cyber operations against transnational criminal networks, primarily targeting pig butchering scams. This move marks a significant shift in the US digital enforcement strategy, allowing private firms to actively surveil and disrupt criminal networks under federal supervision. The Department of Justice and the Department of Homeland Security will oversee these operations, which can include cyber surveillance and 'effects operations' to disrupt criminal infrastructure.
Key Provisions
Private companies must post a bond of at least $1 million and undergo thorough vetting before being approved for operations. They can only target non-US persons without explicit authorization, and operations must proceed under federal supervision.
Background
Pig butchering scams have resulted in billions of dollars in losses for US victims annually, with criminals using dating apps and social media to 'fatten' victims before leading them to fraudulent investment platforms. The scams are deeply intertwined with the crypto ecosystem, with victims typically directed to deposit funds through cryptocurrency platforms.
Implications
Legal experts have flagged significant risks in authorizing private entities to conduct offensive cyber operations, including potential diplomatic friction with countries hosting these criminal networks. The $1 million bond requirement may also prove inadequate in case of significant damages from a botched disruption operation.