At the end of the day , this is a common operation done by state governments and private entities all across the world . The US does it, so does Israel, China, North Korea and I assume all other countries do it to their adversaries. Usually this kind of work is farmed out and if it happens in a US jurisdiction, then US laws should apply.