Trump Memo Paves Way for U.S. Firms to Hack and Disrupt Foreign Crime Groups  Ravie Lakshmanan  Aug 14, 2026 Cybercrime / Offensive Operation A new White House memo signed by U.S. President Donald Trump has instructed the National Coordination Center (NCC) to establish a program that would allow private sector companies to take advantage of their "innovative capabilities" to break into foreign Transnational Criminal Organizations (TCOs) and disrupt them. "By partnering with vetted United States companies subject to the direction and oversight of the Federal Government, we will enhance our ability to counter TCO threats and combat transnational cybercrime, fraud, and other predatory schemes against American citizens," the memo reads . To that end, the NCC has been tasked with setting up a program within 60 days that allows authorized companies to conduct two types of operations against TCOs upon obtaining approval: cyber surveillance operations, which can access sensitive data without authorization from the owner or operator, and cyber effects operations, which can result in disruption, denial, degradation, or destruction of information systems, networks, or infrastructure. The memorandum defines participating countries as private U.S. firms that have been accepted into the initiative and given the green signal to conduct cyber operations under the direction of the United States Government. Targets include any foreign group that conducts cyber-enabled crime against the U.S. government, a U.S. person, or U.S. interests, and are "not an institutional part of a foreign government or wholly operated under a foreign government's direction" unless there is evidence establishing "such connection." The program also requires the companies to stop operations that exceed approved parameters and restrictions, such as targeting of a U.S. person, an information system located in the U.S., or an information system located under the control of a U.S. person. In such cases, the companies are required to conduct minimization procedures and immediately alert the NCC, which is then responsible for notifying the Department of Justice. Earlier this March, the White House announced plans to combat cybercrime, fraud, and predatory schemes carried out by TCOs that target American citizens. These include deploying ransomware and malware, phishing, financial fraud, sextortion, pig butchering scams, and impersonation. According to an accompanying fact sheet, American consumers have reported an estimated $20.8 billion in losses to cyber-enabled crimes. "By partnering with vetted U.S. companies, we will enhance our ability to counter TCO threats and combat transnational cybercrime, fraud, and other predatory schemes against American citizens," the Fact Sheet said. The Trump administration's move represents a significant expansion of the private sector's role in offensive cyber operations against U.S. adversaries, although experts opine it comes with several legal and security risks . Existing U.S. laws prohibit private companies from conducting cyber attacks or disruption operations without court authorization. The development also comes as the German government approved a draft legislation that grants its foreign and domestic intelligence agencies sweeping powers to dismantle hostile servers, disrupt foreign cyber networks, and hack back against state-sponsored hackers, and sabotage adversaries' supply chains. Found this article interesting? Follow us on Google News , Twitter and LinkedIn to read more exclusive content we post. SHARE      Tweet  Share  Share  Share   Share on Facebook  Share on Twitter  Share on Linkedin  Share on Reddit  Share on Hacker News  Share on Email  Share on WhatsApp Share on Facebook Messenger  Share on Telegram SHARE  Cyber Policy , Cybercrime , cybersecurity , Financial Fraud , Government , Malware , network security , offensive security , Phishing , ransomware ⚡ Top Stories This Week Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables 18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers ⭐ Featured Resources See How to Stop the Browser-Based Attacks Your Existing Stack Misses [Book a Live Demo] [Webinar] See Where Claude Fits in the SOC and Where It Falls Short at Scale Defend Against One-Click AI Memory Poisoning — Download the Cheat Sheet Benchmark Your Defenses Against 338M+ Attack Simulations — Download the Blue Report 2026