Residential proxies are often used by bad actors to hide the true source of Internet traffic and now one of them appears to have taken up residence in the White House. The Residential Proxy Observatory, set up by Layer3 Intel to monitor the threat of anonymized network activity, and has identified proxy exit activity on one particular network, AS2650, which is registered to the executive office of the US President and operated out of the White House.[1] Hmmmmm.
Residential proxies are so-called because they typically run on home or personal devices which masks the true source of Internet traffic by rerouting it to appear to come from a different IP address. While it may be concerning that this is activity to be found in one of the protected workspaces in the US, this is in line with recent research from Infoblox, which found that residential proxies were widespread throughout enterprises. While not illegal per se, residential proxies can be used by bad actors for activities that most definitely are illicit, for example, denial-of-service operations or distribution of malware.
Does this mean anything? Not necessarily but makes one wonder. Especially under the current political atmosphere in the US.
The Residential Proxy Observatory has also found evidence of their activity on the island of St. Helena, one of the most remote locations on the planet, so there really is no place on earth to hide from Internet interference. So, who knows.
This article first appeared on CSO.
This article is shared at no charge for educational and informational purposes only.
Red Sky Alliance is a Cyber Threat Analysis and Intelligence Service organization. We provide indicators of compromise information (CTI) via a notification/Tier I analysis service (RedXray) or an analysis service (CTAC). For questions, comments or assistance, please contact the office directly at 1-844-492-7225, or feedback@redskyalliance.com
Weekly Cyber Intelligence Briefings:
- Reporting: https://www.redskyalliance.org/
- Website: https://www.redskyalliance.com/
- LinkedIn: https://www.linkedin.com/company/64265941
Weekly Cyber Intelligence Briefings:
REDSHORTS - Weekly Cyber Intelligence Briefings
https://attendee.gotowebinar.com/register/7855487668891299929
[1] https://www.computerworld.com/article/4245801/a-mole-in-the-white-house-residential-proxies-are-everywhere-3.html
Comments