Researchers Find Residential Proxies on White House Network

Researchers discovered that compromised devices on the Executive Office of the President network were being used as residential proxy exit nodes, routing potentially malicious third-party traffic through one of the most sensitive government networks in the world. The likely culprit is a third-party SDK — Infatica — bundled into software installed on Windows 11 machines, illustrating how supply chain components can silently introduce unauthorized functionality. The activity occurring primarily in the evenings suggests the compromise went undetected during normal monitoring windows, pointing to gaps in continuous network traffic analysis. This matters enormously because residential proxies on government infrastructure can be exploited to launder malicious traffic, bypass IP-based security controls, and obscure the true origin of cyberattacks — with Infatica's historical ties to Russian election interference infrastructure raising the stakes further.