Residential proxy exits traced to White House network addresses
Original title: Residential Proxy Traffic Traced to White House Network
Layer3 recorded 236 exits via 28 proxy services on six addresses in AS2650, with no system compromise reported.
Layer3 Intel said residential proxy traffic exited the White House network 236 times over 30 days, on 26 days between October 5 and November 3. The addresses are in AS2650, registered to the Executive Office of the President, and were also flagged by Spur and Synthient. About half of the activity was between 5pm and midnight Eastern Time, which Layer3 said fits a person whose device ran a proxy SDK rather than guest Wi-Fi. The firm reported no White House compromise, backed up logs, and shared findings with a US federal agency.
Unconfirmed: Layer3 has not identified the device or person, and the White House had not commented when the story was published.
- Twenty-eight residential proxy services could route through six addresses.
- Anyone could buy ordinary rotating access for a few dollars, Layer3 said.
- The most recent activity Layer3 cited was the evening of November 4.
- Layer3 said the data shows exits, not the device or person.
- Past proxy-SDK flaws have enabled internal access, but none is confirmed here.
Impact: Proxy customers could send traffic that appeared to come from White House addresses
- ATT&CK
- T1090 Proxy
- Malware
- Kimwolf
- Countries
- United States
From the original article
2 min read at infosecurity-magazine.com
White House network addresses were used as exits by 28 residential proxy services
By Alessandro Mascellino · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.