Malware · 1 source · latest 3h

White House network IPs reportedly used as residential proxy exit nodes

MALWARELayer3 Intelredteam/daily · 1 source

Severity: High
Sources: 1

What happened

Layer3 Intel's Residential Proxy Observatory logged 236 residential proxy exits from 28 services into White House network address space between 5 October and 3 November, with activity concentrated between 17:00 and midnight local time. Its retention window goes back to 10 July, suggesting months of activity. Synthient believes several Windows 10 and 11 hosts likely have the Infatica SDK installed, and Layer3 notes that flaws in proxy SDKs can enable internal access and lateral movement. No CVE is cited. Defenders should hunt for proxy SDKs and unexpected residential proxy egress on their networks, and block or remove such SDKs.

For security analysts · Written by AI from 1 source · Wrong?

What to do

Check endpoints for unexpected proxy SDKs, such as the Infatica SDK, and remove any that are not authorised.
Review VPN and free app terms to see whether they reuse your connection as an exit node, as the FBI has warned.
Monitor network traffic for residential proxy exit activity, particularly during evening hours.

Written by AI from the sources, checked against them

Read the full story at the source