Residential proxy services let outsiders use White House network addresses
RESEARCHLayer3 Intelredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Layer3 Intel observed residential proxy exit nodes on AS2650 (Executive Office of the President) on 26 of 30 days between 5 October and 3 November, with 236 exits from six IP addresses, mostly between 5 p.m. and midnight. Synthient attributed much of the traffic to Infatica SDK installs on Windows 11 hosts, and Layer3 found 28 proxy services able to exit via this range. No CVE is referenced. Defenders should check for residential proxy SDKs and bundled apps on managed endpoints, and consider blocking or monitoring proxy-related traffic and infrastructure.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Check whether employee devices run residential proxy software, such as free apps or SDKs that bundle proxy services.
- Review network traffic for connections to residential proxy services and remove any such software found.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Krebs on Security
Who and what is in it
Companies
Government agencies