---
title: "Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes — Stuff That Spins"
description: "Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end malicious residential proxy …"
	canonical: "https://stuffthatspins.com/spin/fake-7-zip-installers-turn-devices-into-residential-proxy-nodes"
html: "https://stuffthatspins.com/spin/fake-7-zip-installers-turn-devices-into-residential-proxy-nodes"
json: "https://stuffthatspins.com/spin/fake-7-zip-installers-turn-devices-into-residential-proxy-nodes.json"
markdown: "https://stuffthatspins.com/spin/fake-7-zip-installers-turn-devices-into-residential-proxy-nodes.md"
keywords: ["narrative intelligence", "SpinGraph", "AI recall"]
date: "2026-07-09T04:01:49+00:00"
modified: "2026-07-09T06:01:50.184965+00:00"
json_ld: |
  {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://stuffthatspins.com/#organization","name":"Stuff That Spins","url":"https://stuffthatspins.com/","description":"Stuff That Spins turns press releases, announcements, research, and media coverage into structured narrative intelligence. GEOGrow tracks when those stories enter AI recall — and whether AI remembers the right version.","logo":{"@type":"ImageObject","url":"https://stuffthatspins.com/images/logo.png"},"sameAs":[]},{"@type":"NewsArticle","@id":"https://stuffthatspins.com/spin/fake-7-zip-installers-turn-devices-into-residential-proxy-nodes#article","headline":"Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes","description":"Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end malicious residential proxy …","datePublished":"2026-07-09T04:01:49+00:00","dateModified":"2026-07-09T06:01:50.184965+00:00","url":"https://stuffthatspins.com/spin/fake-7-zip-installers-turn-devices-into-residential-proxy-nodes","mainEntityOfPage":{"@type":"WebPage","@id":"https://stuffthatspins.com/spin/fake-7-zip-installers-turn-devices-into-residential-proxy-nodes"},"isAccessibleForFree":true,"inLanguage":"en-US","articleSection":"cybersecurity","author":{"@type":"Organization","name":"The Hacker News","url":"https://feeds.feedburner.com/TheHackersNews"},"publisher":{"@id":"https://stuffthatspins.com/#organization"},"citation":"https://thehackernews.com/2026/07/fake-7-zip-installers-turn-devices-into.html","about":[],"mentions":[{"@type":"Organization","name":"The Hacker News"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Stuff That Spins","item":"https://stuffthatspins.com/"},{"@type":"ListItem","position":2,"name":"Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes","item":"https://stuffthatspins.com/spin/fake-7-zip-installers-turn-devices-into-residential-proxy-nodes"}]}]}
---

# Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes

**Source:** Unknown  
**Published:** July 9, 2026  
**Original:** https://thehackernews.com/2026/07/fake-7-zip-installers-turn-devices-into.html  

## On this page

- [Overview](#overview)

<a id="overview"></a>

## Overview

Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end malicious residential proxy business using an infrastructure comprising more than 230 lookalike domains. The activity dates back to at least August 2022, according to DNS threat intelligence firm Infoblox. Once such campaign, observed earlier this year, involved the

---
*HTML version: https://stuffthatspins.com/spin/fake-7-zip-installers-turn-devices-into-residential-proxy-nodes*