Researchers Find Residential Proxy Exit Nodes on White House Network
Summary
Layer3 Intel says six IP addresses on the Executive Office of the President’s network served as exits for 28 residential proxy services from October 5 to November 3. Synthient attributed the traffic to Windows 11 machines running InfaticaSDK.
Key points
- Layer3 Intel observed six IP addresses on AS2650, the network reserved for the Executive Office of the President, used by 28 residential proxy services from October 5 to November 3.
- Layer3 Intel says its proxy enumeration pipeline exited through the network 236 times.
- Synthient attributed the traffic to Windows 11 machines running InfaticaSDK.
- Layer3 Intel said most observed activity occurred between 5 p.m. and midnight Eastern Time, a pattern it said suggests a person rather than public guest Wi-Fi.
- Layer3 Intel also reported residential proxy exits in remote locations including Antarctica, the Chagos Islands, and Saint Helena, Ascension and Tristan da Cunha.
Article Details
- Event Type
- Discovery of residential proxy exit nodes on the White House network
- Impact
- Layer3 Intel reported that six IP addresses on the Executive Office of the President network were used by 28 residential proxy services, with its pipeline exiting through the network 236 times. Those exits could allow users of public residential proxy services to send requests through the network. Layer3 Intel said the evening activity pattern suggested a person’s device might be infected with a proxy SDK; Synthient attributed the traffic to Windows 11 machines running InfaticaSDK.