FBI Unveils First-Ever Cyber Strategy Focused on Disrupting Attackers, Not Just Prosecuting Them

The FBI has published its first-ever Cyber Strategy, a document outlining how the agency plans to investigate and disrupt cyber threat actors, including financially motivated criminals and state-sponsored groups that often operate beyond the reach of US law enforcement.

The strategy signals a shift in approach: rather than measuring success mainly through arrests, which can take years and rarely happen when attackers operate overseas, the FBI is now placing greater weight on disruption. This includes dismantling criminal infrastructure, seizing stolen cryptocurrency, exposing hacking techniques and taking down ransomware operations. Security experts have welcomed the move, noting that operational wins like forcing adversaries to rebuild their tools can be just as valuable as convictions.

The strategy is built around four pillars, the first of which focuses on identifying threats, alerting victims of compromise, and launching coordinated operations against attackers. The FBI says it uses a 'best athlete' model, meaning whichever team or partner has the strongest capability leads each phase of an operation. This shift follows a broader push by the US government toward proactive cyber disruption, including a recent memorandum allowing federal agencies to work with private firms on offensive operations against foreign threat actors.