The White House has announced a major expansion of federal capabilities against foreign cybercrime gangs through a new program that allows vetted private US companies to conduct targeted cyber operations under federal control. The initiative, managed by the National Coordination Center (NCC), aims to disrupt and dismantle foreign cyber-enabled transnational criminal organizations (TCOs) that pose significant threats to national security.
To participate in the program, US companies must undergo rigorous vetting and sign formal contracts with the Department of Justice (DOJ) or the Department of Homeland Security (DHS). These contracts may require a bond or escrow of at least $1 million, which will be forfeited if a company fails to comply with operational requirements. Participating firms can also collaborate with other private entities and federal agencies to receive threat intelligence and identify specific foreign threats.
The program authorizes two types of operations: cyber surveillance and cyber effects. Cyber surveillance involves covertly accessing systems to collect intelligence, while cyber effects cover actions that disrupt, degrade, or destroy adversary information systems and infrastructure. However, the program explicitly bars operations that result in critical outcomes – defined as actions likely to cause loss of life, serious injury, or a use of force or armed attack under international law.
To prevent accidental breaches of US persons or domestic systems, operational controls require written approval from the executive directors before any company takes action on a cyber package. Proposed operations must undergo multi-agency deconfliction involving law enforcement, the Department of State, and other agencies to ensure that all stakeholders are aware of planned actions.
The White House has emphasized that target selection is restricted to non-state criminal groups, although foreign entities are assumed to be independent of foreign governments unless clear intelligence proves otherwise. The memorandum enforces strict safeguards regarding domestic targets and US persons, requiring contractors to immediately cease operations and notify the government if an accidental breach occurs.
This initiative marks a significant shift in the federal government’s approach to combating cybercrime gangs, allowing private companies to play a more active role in disrupting foreign threats. By partnering with vetted US companies, the NCC aims to enhance its capabilities and stay ahead of evolving cyber threats.
As this new program takes shape, it is essential for individuals and organizations to be aware of the potential consequences of accidental breaches or unauthorized operations. This can help prevent unnecessary disruptions and ensure that all parties are working together effectively to combat foreign cybercrime gangs.
Source: SecurityWeek — 2026-08-13