Fake Installers, Fake Reviews, Fake Services - Real Proxies, Real Victims

A sophisticated threat actor known as Lurking Lizard has built a vast, end-to-end criminal ecosystem by distributing trojanized software and fake apps that covertly enroll victim devices into a monetized residential proxy network, leveraging lookalike domains, fake reviews, and partnerships with major proxy providers to profit from global cybercrime at scale.