Fake 7-Zip installers turn devices into residential proxy nodes

Colleagues, I’d like to draw attention to a new development in cybersecurity.

I came across the Lurking Lizard case: through fake 7-Zip installers and more than 230 lookalike domains, attackers infect devices and fold them into a proxy network.

They also impersonate well-known providers, create fake review sites, and use different lures for Windows, macOS, and Android.

In essence, this is not just a malware campaign, but a structured operation with victim selection, infrastructure, and traffic monetization.

Why it matters: a home IP can be used without your knowledge, and legitimate traffic may be flagged as suspicious or blocked.

Do you check where your team downloads utilities from?

#cybersecurity #malware #proxy #threatintelligence