Threats · 48 days ago
U.S. lawmakers on September 9 asked Commerce to add BellTroX and two other India-based hack-for-hire firms to the Entity List, escalating a campaign that Citizen Lab linked to Dark Basin and targeted espionage against U.S. citizens, businesses, and their lawyers.
The idea is to treat mercenary hacking as a sanctions and export-control problem, not only a criminal one. If Commerce acts, the firms can lose access to U.S. software licenses, cloud services, and other technology that helps them operate abroad, so the pressure lands on their operating capacity as well as on any single case.
For readers tracking mercenary espionage, the shift matters because it moves the fight upstream: a designation can squeeze the support systems that make these firms effective even when no criminal prosecution or takedown has landed. That leaves media, NGO, and legal-adjacent targets with a policy fight still in motion, not a closed threat picture.
3 sources covering this story
Group of Bipartisan Lawmakers Ask US Government to Ban Several Hack-for-Hire Firms - The Citizen Lab
lawmakers call for sanctions on hack-for-hire companies, citing Citizen Lab report.
Lawmakers call on Commerce to sanction hackers-for-hire
lawmakers is urging the Treasury Department to sanction three India-based hack-for-hire groups accused of targeting American citizens and businesses.
Group of bipartisan lawmakers ask US government to ban several hack-for-hire firms | TechCrunch
The three Indian companies are accused of using hackers to steal information used to sway litigation.
Part of the PlainSec briefing for 2026-09-11