Opinion: This should be America’s next step to stay ahead of ruthless cybercriminals

Editor’s Note: Frank Cilluffo directs the McCrary Institute for Cyber and Critical Infrastructure Security at Auburn University. He previously served as a commissioner on the US Cyberspace Solarium Commission and as a special assistant to President George W. Bush for homeland security. Joshua Whitman, PhD, is the interim deputy director of policy at the McCrary Institute, specializing in cybersecurity policy and communications. The views expressed in this commentary are their own. View more opinionon CNN.

The threat cybercrime poses to nations, businesses and individuals has reached a critical juncture — and it’s time to recognize that cybercriminals are operating freely in countries that provide them shelter, causing economic harm and undermining global security.

The United States International Cyberspace and Digital Policy Strategy, published by the State Department in May, introduces the concept of “digital solidarity” to collaboratively battle malicious cyber activity. However, this strategy overlooks a critical tool for combating cybercrime: the designation of state sponsors of cybercrime.

To close this gap and get ahead of increasing cyber threats, the United States must take the lead in identifying and designating nations that harbor cybercriminal organizations.

The exponential rise of cybercrime demands an escalated international response. Ransomware attacks alone reaped record payouts in 2023 and are projected to cost the world more than $40 billion in 2024. Nation-states, major corporations, critical infrastructure providers,schools, hospitals and ordinary citizens have all fallen victim. The ubiquity of cybercrime has normalized what was once a niche threat reserved for