Cybersecurity firm Malwarebytes has uncovered a deceptive campaign where a fake website at 7zip[.]com impersonates the legitimate 7-Zip archiver (official domain: 7-zip.org) to distribute trojanized installers. These malicious downloads deliver a working version of the popular file compression tool while secretly installing proxy malware that turns victims' home PCs into residential proxy nodes. The hidden components-Uphero.exe, hero.exe, and hero.dll-establish persistence through Windows services, modify firewall rules, profile the system, and route third-party traffic through the infected machine for purposes like fraud, web scraping, or anonymity. The scheme has evaded detection for some time, partly due to misdirected links in YouTube tutorials and other sources pointing users to the bogus domain instead of the real one. Malwarebytes advises that anyone who downloaded from 7zip[.]com should scan their system immediately, as reputable security tools can detect and remove the threat. Users are urged to always verify software sources and bookmark official sites to avoid such traps.