International Committee of the Red Cross rules of engagement for civilian hackers

Since 2013 there has been a rise in hacking associated with conflicts, such as the Syrian civil war, which led to attacks on Western media. This has significantly accelerated after the Russian invasion of Ukraine. ==Rules==

The rules are: • Do not attack civilian targets. • Do not use malware or other tools or techniques that spread automatically and attack military and civilian targets indiscriminately. • When planning a cyber-attack against a military target, do everything possible to avoid or minimise any impact on civilians. • Do not conduct any cyber-attack against medical and humanitarian facilities. • Do not conduct any cyber-attack against anything essential to the survival of the population or that can release dangerous forces. • Do not threaten violence to spread terror among civilians. • Do not incite violations of international humanitarian law. • Comply with these rules even if the enemy doesn't. The ICRC has also asked governments to restrain hackers and enforce existing laws against cybercrime. ==Responses==

The IT Army of Ukraine has said they will "make best efforts to follow the rules" even if it puts them at a disadvantage with their enemies. A high profile member of Anonymous said they had "always operated based on several principles, including rules cited by the ICRC" but had become disillusioned with the organisation and would not follow the rules. A representative of Anonymous Sudan said the rules were "not viable and that breaking them for the group's cause is unavoidable". ==See also==