SecurityFan score 22 · Tier C4 sources389 comments in the community

Residential proxy traffic caught leaving the White House network

Help Net Security · By Sinisa Markovic · 7h ago

The Brief

Layer3 Intel found 28 residential proxy services using 6 IP addresses on the White House network over one month.
Most of the activity happened between 5 p.m. and midnight Eastern Time, which suggests a person's device rather than public guest Wi-Fi.
Krebs on Security reports several staffers use devices or mobile apps that let others rent their internet address, and one proxy service is run by a Russian company.

Why it matters

Devices with proxy SDKs can be rented out by third parties, and Help Net Security notes this may open a path into sensitive networks, so developers should treat unknown SDKs on any network as a risk.

Who’s affected

Teams whose devices run third-party proxy SDKs
Anyone on networks that share IP space with affected devices

#residential-proxy
#security
#supply-chain
#iot
#network

The White House network has been working as an exit point for residential proxy services, a setup that may open a path into one of the most closely guarded networks in the world, Layer3 Intel found. In a blog post, the threat intelligence firm reported that its proxy enumeration…

Read the full story at helpnetsecurity.com ↗

What developers are saying

Based on 389 comments · Mixed reactions

Commenters split between concern about infected IoT devices and command-and-control risk and skepticism about the evidence. Several argue residential proxies have legitimate uses, and some question whether the data shows a link to the White House itself.

Doubts about evidence and methodology25%
Infected devices and C2 risk25%
Legitimate uses of residential proxies15%
Supply-chain and IoT vulnerabilities20%
Jokes and political snark15%

In favour

+ Residential proxies support scraping for archiving and automation, and offer anonymity

Concerns

− Compromised devices could be tasked with less benign work through command-and-control
− The article may not prove the proxies are tied to the White House itself
− The site is new and the methodology is unclear

“Residential proxies are a very important part of the internet, they allow scraping for archiving, automation and can be used for extra anonymity.”
vanyle on Hacker News