Americans may be unwittingly giving hackers an easy path to access their houses. Cybersecurity experts, including cybercrime analysts at the FBI, are warning about residential proxy networks that can be found on many off-brand electronics.
What are residential proxy networks? These software systems are “designed to route other people’s internet traffic through a user’s device,” said Cyber Magazine. The networks operate like “forged return addresses on envelopes — someone else’s internet traffic is rerouted through your connection,” said officials at Comcast’s Threat Research Lab to Cyber. As the networks engage with users, they “quietly launder illegitimate activity” while making it appear that your device is the “initiator of that traffic.”
Residential proxy networks can make their way onto a variety of home devices, as “TV streaming devices, digital picture frames, smartphones, tablets and routers are used to route traffic,” said the FBI. Many people who own such devices do not “realize their internet connection could be used by someone else without their permission.” The devices can gain internet access when the “owner of the device provides consent” unknowingly. Other times, the owner is “unaware their IP address is being used.”
Some of these devices “ship with residential proxy software preinstalled on them,” which can “happen with certain low-cost video-streaming systems,” said The Wall Street Journal. In other cases, people might “download the code to their smartphones” without realizing it.
How can people protect themselves? Avoid “TV streaming devices that claim to provide free sports, TV shows and movies,” said the FBI, as these “may contain malware or backdoors that hijack your internet network and can lead to identity theft.” The agency also recommends that people be wary of downloading free VPNs and clicking on pop-ups, which can “initiate malware installation on your device.”
Ordinary Americans are also fighting back. Rochester Institute of Technology senior Benjamin Brundage began an investigation in 2025 as a “growing network of hacked devices was launching the biggest cyberattacks ever seen” via a Chinese company called Ipidea, said the Journal. Brundage “identified 11 of the largest residential proxy companies that were vulnerable” to hackers, and Google “took legal action,” said the tech company in a press release.
|