GoKawiilSecurity firms find White House network running rentable residential proxy software
Researchers at Layer3 Intel and Synthient found that a device on the White House network has been running residential proxy software, letting outside parties route internet traffic through it for a small fee. Layer3 says 28 residential proxy services used the network between October 5 and November 3, mostly in the evening hours, suggesting an infected personal device rather than guest Wi-Fi. Synthient links the likely source to proxy SDKs bundled into the watch-party app Rave.
GoKawiil's interpretation of the reporting above, not reported fact.
The findings suggest a White House device may be unknowingly compromised, which could let unknown third parties mask malicious or illicit traffic behind a trusted government IP address. This raises questions about device security practices and app vetting at the highest levels of government, since residential proxy SDKs are often installed without users realizing it. The incident highlights a broader cybersecurity risk from everyday apps carrying hidden monetization software.
- Layer3 Intel and Synthient identified 28 residential proxy services operating from the White House network over roughly a month.
- The activity pattern points to a personal device, possibly infected via an app like Rave, rather than public Wi-Fi.
- Residential proxies can let third parties rent and disguise their internet traffic through compromised networks, including government ones.
Source: theverge.com — Emma Roth, 2026-11-06
Published there as: “Just about anyone can rent access to White House IP addresses”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.