White House IP Addresses Can Be Rented for a Few Dollars via Proxy Services
Cybersecurity firm Layer3 has found that internet traffic can be routed through IP addresses belonging to the White House network using publicly available proxy services. For now, there is no evidence of espionage or a breach of internal White House systems.
Cybersecurity company Layer3 has discovered that internet traffic can be routed through IP addresses belonging to the network of the White House, the office of the US president. Access to this option can be bought for a few dollars from publicly available proxy services. As a result, outsiders can make their online activity appear to originate from the White House network.
How it works
Proxy services let customers use other people's computer or phone internet connections. Cybercriminals also use them to hide their true location and identity.
Layer3 found that IP addresses belonging to the White House network were offered in 28 different services. Between 5 October and 3 November, researchers observed traffic being routed through six White House IP addresses on 236 occasions.
Possible cause
Experts suggest the problem may have been caused by a seemingly harmless app installed on a computer with access to the White House network. Some free apps include software that lets their developers earn money by renting users' internet connections to other people.
Cybersecurity firm Synthient believes the app "Rave" is to blame. Researchers detected activity linked to this software on computers running Windows 10 and Windows 11. However, it remains unclear which specific device had access to the White House network and who used it.
What the risks are
The main risk is that such software not only lets outsiders use trusted IP addresses but may also create security holes. Vulnerabilities previously found in similar services allowed attackers to reach other devices on the same local network. If such flaws were present in software used on the White House network, the consequences could be far more serious.
At the same time, researchers note that there is currently no evidence of a deliberately installed spyware program or of a breach of internal White House systems.
