A fake 7-Zip website (7zip.com) has been distributing trojanized installers that convert infected Windows machines into residential proxy nodes. The malware, signed with a revoked certificate, installs a functional 7-Zip alongside hidden components (Uphero.exe, hero.exe, hero.dll) that establish system-level persistence,
Sort: