Researchers detect paid proxy traffic linked to the White House network

Security researchers found residential proxy activity on the White House network, which could let paying outsiders route internet traffic through an IP address associated with the presidential network. The discovery matters because proxies can obscure where online activity originates and may be used to bypass location restrictions or security filters.

Layer3 Intel identified 28 proxy services routing traffic from the network between 5 October and 3 November, often from 5pm to midnight ET. Researchers said the regular timing suggests a person’s device rather than public guest Wi-Fi, and Synthient linked the activity to Windows devices and proxy providers; it said the watch-party app Rave may be involved because it includes 12 proxy SDKs. Layer3 warned that access could be obtained through a public service for a few dollars.