Fake VPN and 7-Zip Apps Turn Victims Into Residential Proxy Nodes
ID: bb7a8eee-4aef-57de-80d7-7d4628b5400d
STIX ID: report--bb7a8eee-4aef-57de-80d7-7d4628b5400d
Feed Name: Security Affairs
Threat Score
**Fake VPN and 7‑Zip apps (Lurking Lizard) trojanize user devices to act as residential proxy nodes; the operator runs a broad criminal ecosystem (fake storefronts, review sites, and resale to proxy providers), with shared infrastructure indicators (hardcoded IPLogger URL), valid code signing, and a multi‑year campaign evidenced by >1M WireVPN downloads and ~230 linked domains.**
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.