Residential proxy traffic caught leaving the White House network

Compromised consumer-grade streaming applications containing embedded proxy SDKs were able to route network traffic out of what should be one of the most secured government networks in the world. This highlights a critical supply chain risk: software that appears legitimate can silently bundle malicious or privacy-invasive components that repurpose end-user devices as proxy nodes. The fact that this traffic was detected by an external threat intelligence firm — not internal monitoring — underscores a serious gap in egress traffic visibility and endpoint control. Allowing unapproved or unvetted consumer applications on sensitive government networks dramatically expands the attack surface in ways that are difficult to detect without robust outbound traffic analysis.