White House network used as residential proxy exit spot
Original title: The White House is apparently a popular residential proxy exit spot
Devices on the White House network appear to be serving as residential proxy exit nodes, raising risks of lateral movement into internal systems via potentially vulnerable SDKs.
Security firm Layer3 discovered devices associated with the White House network acting as residential proxy exit nodes nearly every day between October 5 and November 3, with 236 separate exits observed. The activity occurred primarily in the evening White House time and may stem from infected devices using the Infatica SDK. Layer3 founder Sergiy Usatyuk noted continuous activity since at least July and possible internal network access risks. The US State Department requested logs following the report. The White House did not respond to questions.
Unconfirmed: Exact number of infected devices and specific proxy services unknown; attribution to specific threat actors unconfirmed
- 28 distinct residential proxy services observed exiting into White House network daily
- Activity peaked 5 pm to midnight White House time
- Possible Infatica SDK on infected Windows 10/11 devices
- Logs requested by State Department
- Continuous proxy use likely for months
Impact: internal network access and lateral movement
| Product | Affected |
|---|---|
| Layer3 Residential Proxy Observatory | — |
| Infatica SDK | — |
- 1.monitor for Infatica SDK on devices
- 2.check for unauthorized proxy software
- Products
- Residential Proxy Observatory
- Organizations
- White House
From the original article
3 min read at theregister.comWhether through malware or other means, devices associated with the White House network appear to be serving as residential proxy exit nodes, potentially posing security risks to one of the world's most sensitive networks.
By Brandon Vigliarolo · theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.