
AI Makes Hacking Easy. But Private Hackers Can Now Strike Back at Cybercriminals
Summary: Privateering Against Cybercriminals – A New Era of Offensive Cybersecurity
In this episode of Unchained, Laura Shin, Chris Giancarlo (former CFTC Chairman), and Ari Redbord (TRM Labs) discuss a groundbreaking approach to fighting cybercrime: reviving privateering for the digital age.
The Proposal: Empowering Private Companies to Strike Back- Chris Giancarlo and Chris Perkins proposed modernizing the constitutional power of privateering to allow private companies to hack back against state-sponsored groups like the Lazarus Group.
- The White House adopted the idea, issuing a Presidential Memorandum authorizing private contractors to conduct offensive cyber operations.
- AI-powered attacks are surging: Fully autonomous ransomware campaigns now operate at machine speed, doubling the number of attacks.
- North Korea stole over $1 billion in crypto in 2025 alone, fueling weapons programs. Pig butchering networks and drug cartels also increasingly leverage AI.
- The memorandum only targets non-state criminal organizations (e.g., ransomware gangs, cartels). Against state actors like North Korea, only government agencies (DoD, DOJ) can authorize strikes.
- Strict oversight: Every operation must be approved by the Department of Justice and Treasury. Contractors undergo deep background checks.
- Disrupt infrastructure: Take down servers and communication channels of fraud networks.
- Recover stolen funds: Sanctions and law enforcement, as seen in the Prince Group case (Cambodia), can seize billions.
- Combat social engineering: AI tools detect deepfakes and protect hiring processes from North Korean IT workers.
- This is a measured first step – deliberately small to avoid unintended escalation. If successful, it may expand to state actors.
- Cybersecurity remains critical: Companies must use AI to proactively find vulnerabilities before attackers exploit them.
Bottom line: The U.S. is fostering a symbiotic partnership between government and the private sector to counter the growing cyber threat. The private sector provides innovation; the government provides legitimacy and control.






