Synthient
CompanySecurity timeline
- Malware reported by Krebs on SecurityGoogle and partners dismantle XCPE botnet of 1.3 million Android TV boxes
Recent news
White House network address found rented out through 28 residential proxy services
Layer3 Intel reports that 28 residential proxy services used addresses from AS2650, a block registered to the Executive Office of the President, between October 5 and November 3, 2026. The team recorded 236 exits over 30 days, and Spur and Synthient also flagged the addresses as proxy exits. The activity appears to come from a personal device running proxy software kit, which can expose the wider network.
Residential proxy services let outsiders use White House network addresses
Layer3 Intel found residential proxy nodes beaconing from AS2650, the network range reserved for the Executive Office of the President, between 5 October and 3 November. Synthient linked much of this to Infatica software on Windows 11 machines, and Layer3 counted 28 proxy services that could exit through the network. Residential proxies are often bundled into free apps and SDKs, so they frequently appear on corporate and government networks.
Google and partners dismantle XCPE botnet of 1.3 million Android TV boxes
Google, working with industry partners, dismantled the XCPE botnet of over 1.3 million Android TV set-top boxes. The malware was loaded by Videostrong Technology Co., a Chinese manufacturer, which sold access to criminal affiliates and enabled residential proxy services that resold infected devices' IP addresses. Google took legal action against the domains and servers used to control the botnet, and says it has fixed the weakness that let the malware load at first boot.