TBNSecurityPolitics
Want to Rent an Internet Address at the White House?
Publication: Krebs on Security
Author: BrianKrebs
Source published: 05/11/2026, 04:36:17 UTC
Briefing created: 05/11/2026, 06:49:01 UTC
Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 05/11/2026, 05:03:25 UTC.
Briefings
Security experts warn that White House staff are using residential proxy services to rent out their internet addresses, with Russian company King Servers identified as a key provider. Layer3 Intel detected persistent proxy activity from the Executive Office of the President network between October 5 and November 3, 2026, where 236 nodes exited the network. The activity involved multiple Windows 11 installations of Infatica, a proxy service linked to Vladimir Fomenko, founder of King Servers. This practice allows criminals to bypass security controls and access confidential networks, a risk highlighted by recent vulnerabilities in proxy services.
Key points
- Russian company King Servers, whose founder Vladimir Fomenko's hosting business was involved in election system compromises in 2016, provided internet addresses for White House staff via proxy services.
- Layer3 Intel detected 236 proxy nodes exiting the Executive Office of the President network between October 5 and November 3, 2026, with activity concentrated between 5 p.m. and midnight.
Context
Residential proxy services allow customers to rent others' internet addresses for anonymization, often used by state security services to compromise databases. These services pose significant security risks, including malware infection and account takeover, as evidenced by recent vulnerabilities exploited in late 2025 and early 2026.
Limitations
Coverage is limited to White House network activity detected between October 5 and November 3, 2026. Specific details on the number of White House staff using these services are not provided, and the extent of data breaches or specific malware infections is not detailed.
Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 05/11/2026, 06:49:01 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.
View archived briefing on IPFS
bafybeibljfauqpmr6ajwcfpfz2za6j4ilygzebjag3ebjmxjrdmfmpg5ci