“hacker-for-hire” firm? Hacking should be a capital offense. Get caught, you die. No exceptions, no excuses. Same for people who fund virus creation.
Methinks such should be subject to “Letters of Marque and Reprisal” per the Constitution. The malicious aren’t worth federal involvement, but private citizens should petition Congress for, and receive, permission to wage literal war on the perpetrators.