New guidance from the Department of Justice warns threat intelligence companies to avoid breaking the law when gathering data from dark web forums and suspected cybercriminals.
The department’s cybersecurity unit last week published a 15-page memo meant to clarify prosecutors’ position on the collection of evidence from private companies.
Firms like Recorded Future, Digital Shadows and others often monitor known cybercriminal hangouts to gather information about possible data breaches, malicious software trends and emerging fraud techniques.