On 4 October 2023 the International Committee of the Red Cross published rules of engagement for civilian hackers involved in conflicts.[1][2] The rules had been described as a "Geneva Code of cyber-war".[3]
Since 2013 there has been a rise in hacking associated with conflicts, such as the Syrian civil war, which led to attacks on Western media.[1][2] This has significantly accelerated after the Russian invasion of Ukraine.[1][2]
The rules are:
The ICRC has also asked governments to restrain hackers and enforce existing laws against cybercrime.[1][2]
The IT Army of Ukraine has said they will "make best efforts to follow the rules" even if it puts them at a disadvantage with their enemies.[1] They also said that attacks on healthcare facilities had already been ruled out by them.[1][3]
Killnet initially refused to follow the rules, but a couple of days later agreed to abide by them.[1][3]
A high-ranking member of Anonymous said they had "always operated based on several principles, including rules cited by the ICRC" but had become disillusioned with the organisation and would not follow the rules.[1]
A representative of Anonymous Sudan said the rules were "not viable and that breaking them for the group's cause is unavoidable".[1]