Science & Tech · Cybersecurity · 3 hrs ago
Residential proxy traffic routed through White House network 236 times
Researchers detected residential proxy traffic leaving the White House network 236 times over 30 days, from October 5 to November 3.
The traffic used six internet addresses registered to the Executive Office of the President and appeared on 26 of those 30 days.
Twenty-eight proxy services could route traffic through those addresses, allowing customers to make their internet activity appear to come from the White House network.
Residential proxy services often use software included in apps to route customers’ traffic through other people’s devices.
The evening pattern may point to a device used regularly at that time, but the researchers said their data cannot identify the device or its user.
No compromise of White House systems was reported, though flaws in proxy software can expose local networks to outside access.
The researchers preserved their logs and shared their findings with a federal agency; the White House had not immediately responded to a request for comment.
Residential proxy traffic exited through the White House network 236 times over a 30-day period, according to Layer3 Intel.
The activity was recorded on 26 of the 30 days from October 5 to November 3 and passed through six internet addresses.
Layer3 said 28 residential proxy services were able to route traffic through the network.
The activity was concentrated in the evening, a pattern Layer3 said could suggest a person’s device rather than public guest Wi-Fi.
Layer3 said it had not found evidence that White House systems were compromised and shared its findings with a US federal agency.
- Who
- Layer3 Intel detected the traffic. The device or person behind it is unknown.
- What
- Residential proxy traffic exited through White House network addresses 236 times.
- When
- October 5 to November 3, over a 30-day period.
- Where
- The Executive Office of the President’s internet address network, AS2650, which hosts the White House network.
- Why
- Not stated. Layer3 suggested the evening pattern could point to a person’s device running proxy software, but did not identify the cause.
This story does not have two clearly opposing sides.
Layer3 recorded residential proxy exits on 26 of the 30 days.
Layer3 published research detailing the findings.
Layer3 founder Sergiy Usatyuk said the most recent activity had been recorded.
- Traffic exits
- 236 times
- Observation period
- October 5 to November 3
- Active days
- 26 of 30 days
- White House addresses
- Six
- Proxy services
- 28
- Network
- AS2650, registered to the Executive Office of the President
3 sources
What people are saying
This is public access
Our data shows the exits, not the device or the person behind them
The most recent activity was recorded in the evening of November 4; hopefully, it stops soon!
Posts on X
Several Whitehouse staffers are running a Windows 11 machine with InfaticaSDK installed 👀