Researchers Find Proxy Software Quietly Running on White House Network

Someone on the White House network appears to be running software that turns the presidential network into a rentable exit point for internet traffic. Security firms Layer3 Intel and Synthient discovered the residential proxy activity, according to Krebs on Security and The Register, which first reported the findings. The price of entry, per those reports, is startlingly low — a few dollars.

A residential proxy does exactly what the name suggests: it lets a paying customer borrow a real home IP address and push their traffic through it. That masks where the activity is actually coming from, making the traffic look like it belongs to whoever owns the connection. When the connection sits inside the White House, the disguise gets a lot more convincing.

The likely culprit isn't a rogue router in the West Wing. Residential proxy networks often sneak onto devices through third-party software development kits bundled into apps and browser extensions. Users install the app, the SDK comes along, and their connection quietly becomes inventory for rent.

The reports leave key questions open, including who was running the software and how long it had been live. Paparazzi has reached out for more details. For now, the takeaway is simple: the machinery behind rented IP addresses can show up almost anywhere — even at 1600 Pennsylvania Avenue.