Infatica
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Security timeline
- Malware reported by The Register (Security)White House network IPs reportedly used as residential proxy exit nodes
Recent news
White House network IPs reportedly used as residential proxy exit nodes
Layer3 Intel reports that 28 residential proxy services exited into the White House network almost daily between 5 October and 3 November, with 236 exits in that period, mostly in the evenings. The likely cause is an infected device running a proxy SDK, possibly Infatica, and Synthient believes several Windows 10 and 11 devices may have it installed. Layer3 warns that poorly secured proxy SDKs can allow lateral movement into internal systems, and the State Department has requested the logs.
Residential proxy services let outsiders use White House network addresses
Layer3 Intel found residential proxy nodes beaconing from AS2650, the network range reserved for the Executive Office of the President, between 5 October and 3 November. Synthient linked much of this to Infatica software on Windows 11 machines, and Layer3 counted 28 proxy services that could exit through the network. Residential proxies are often bundled into free apps and SDKs, so they frequently appear on corporate and government networks.