Cybercrime,
Fraud Management & Cybercrime,
Governance & Risk Management
FBI’s New Strategy Emphasizes Action Against Cybercrime
In an ambitious move, the FBI has publicly announced its strategy to combat a growing range of cyber threats, particularly focusing on ransomware organizations and online scammers. This unprecedented effort aims not only to enhance the bureau’s response mechanisms but also to bolster its collaboration with both victims and private sector partners, laying the groundwork for an aggressive approach against criminal computer networks.
FBI Assistant Director for Cyber Brett Leatherman elucidated the shift during a press briefing at the Billington Cyber Summit, emphasizing a proactive stance rather than a reactive one. “The most important change I hope people will see is that we don’t sit and wait for the best opportunity to take action. We take action, and we enable partners to take action,” he stated, highlighting the urgency behind the FBI’s newfound operational tempo.
The strategy signifies a crucial pivot in law enforcement tactics. Leatherman specified that if coordinating with foreign or other U.S. agencies leads to faster results, the FBI is prepared to efficiently transfer cases. “Let’s give it to Cyber Command. Let’s give it to the Brits. Let’s give it to the Japanese,” he noted, making it clear that collaboration is key to imposing costs on cybercriminals and aiding victims alike.
Those involved in cyber law enforcement see an opportunity for a markedly increased frequency of operations aimed at dismantling cybercriminal infrastructure. Traditionally, such efforts have been sporadic, often saved for large, orchestrated operations conducted a few times a year. Under the new strategy, however, Leatherman promised that the Bureau would initiate numerous takedown operations, particularly by cooperating with tech hyperscalers known for their robust technological capabilities.
Despite the seemingly insurmountable nature of cybercrime, Leatherman expressed optimism about the progress being made. Drawing from his experiences in tackling gang violence in Michigan, he highlighted the parallels between traditional crime and cyber threats, noting that while it may appear futile to eliminate every cybercriminal, impactful changes can still be achieved. “Every time you took the leadership off the field, you saw violence reduced,” he recalled, emphasizing the bureaucracy’s commitment to a long-term strategy that aims not for the complete eradication of cybercrime, but substantial behavioral changes in both perpetrators and potential victims.
Leatherman reinforced this view by referencing a significant observation: the decline in ransomware payments. Although ransomware attacks persist, the payment amounts have seen a notable reduction, attributed in part to law enforcement actions. He cited that since January of the previous year, the indictment of approximately 50 alleged hackers has occurred, a development he believes will serve as a deterrent to future criminal enterprises.
However, anxieties remain regarding corporate cooperation with law enforcement. Leatherman pointed out an alarming trend where the rate at which companies report breaches to the FBI has diminished. Citing the annual IBM-Ponemon Cost of a Data Breach report, he expressed concern over the fading willingness of organizations to involve authorities immediately following a cyber incident. “We have had a lot of hesitation recently from organizations to quickly provide information that would support law enforcement operations,” he noted, indicating an increasing gap in trust and communication.
Megan Rolander, former unit chief of the FBI’s ransomware and malware program, provided insight into possible reasons behind this reluctance. She mentioned fears surrounding liability, wherein companies might become targets themselves for lawsuits citing negligence, even as they find themselves as victims of a cyberattack. “Cybersecurity is one of the weird ones,” she explained, noting the complex landscape of victimhood and legal implications that often discourage collaboration between private enterprises and law enforcement.
Despite these challenges, Rolander commended the FBI’s newly published strategy, particularly its assertive call for enhanced collaboration between the Bureau and the private sector to effectively combat cybercrime. She noted that for the FBI to acknowledge its dependence on private entities represents a paradigm shift in the bureau’s operational philosophy, moving toward a more transparent and inclusive approach.
According to Leatherman, the bureau has already adapted its information-sharing policies to foster more cooperative relationships. “We’ve already changed that. Our posture is share intelligence,” he affirmed, signaling a major cultural transformation within the cyber division. The aim is to protect critical infrastructure while helping organizations better prepare for potential cyber threats.
Ultimately, the FBI’s strategy underscores the increasing complexity and sophistication of cybercrime. Leatherman concluded that as the landscape evolves, so too must the FBI’s tactical approach, emphasizing the importance of prioritization in countering such multifaceted threats. “When you can’t handle every little thing that happens out there, you’ve got to prioritize,” he said, solidifying the Bureau’s commitment to a renewed focus on cybercrime prevention in an era of increasing digital vulnerability.