Proxy traffic puts Executive Office IP attribution in doubt
Layer3 Intel found 236 residential-proxy exits through six Executive Office of the President network addresses between October 5 and November 3, with 28 services able to route through them on 26 of those 30 days. Synthient linked some activity to Infatica, but the devices’ owners and how the software got there remain unknown.
A residential proxy lets paying customers send web requests through someone else’s device, so websites see that device’s White House-associated address instead of the customer’s. The result is unrelated traffic that can look government-originated; Layer3 reported no compromise of White House systems.
For federal responders, an Executive Office source IP is therefore not proof of government-user activity. If the device providing the exit can also reach internal systems, rented proxy access could offer a route inward, but these reports do not establish that it did. The same attribution problem can follow free apps that bundle proxy components onto other organizations’ devices.
Want to Rent an Internet Address at the White House?
Several staffers at the White House are using computers or mobile devices equipped with residential proxy services that render their internet address available for others to rent, security experts warned today.