White House staffers infected with Infatica residential proxy malware

Security researchers detected residential proxy nodes beaconing from White House networks (AS2650) between October and November. Multiple Windows 11 installations of Infatica, a proxy service often bundled with free applications, were found running. The malware rents out the infected devices' IP addresses to third parties. Infatica's Russian founder previously operated hosting infrastructure used in 2016 election system cyberattacks. Organizations should audit employee devices for unauthorized proxy services and enforce application security policies.