White House network used for renting internet addresses via proxies
Original title: Want to Rent an Internet Address at the White House?
Residential proxies from Russian-linked services detected beaconing from the Executive Office of the President network, risking potential data exposure.
Several staffers at the White House are using computers or mobile devices equipped with residential proxy services. Layer3 Intel detected multiple proxy nodes from the AS2650 network reserved for the Executive Office of the President. The proxy activity was persistent between October 5 and November 3. Infatica is one of the services identified, and 28 separate residential proxy services were found to exit through the network.
Unconfirmed: The extent of any data exposure or malicious use is unconfirmed
- Proxy exit nodes detected from 6 internet addresses on 26 of 30 days
- Most activity occurs in the evenings between 5 p.m. and midnight
- 28 separate residential proxy services were able to exit the network
- Linked to 2016 election system compromises by the Russian founder
- Security firm Synthient identified Infatica proxy program
Impact: unauthorized proxy access to network allowing potential attacks
- Victims
- white house
- Organizations
- layer3 intelsynthient
- Countries
- russia
From the original article
3 min read at krebsonsecurity.com
Several staffers at the White House are using computers or mobile devices equipped with residential proxy services that render their internet address available for others to rent, security experts warned today. One of the proxy services is a Russian company whose founder's web hosting business was ground zero for cyberattacks against election systems in Arizona and Illinois in 2016.
By BrianKrebs · krebsonsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.