WireVPN is a malware-laced VPN application used by Lurking Lizard to recruit devices into a residential proxy botnet. Available on Android, macOS, and Windows, the Android version 'wirevpn – Fast Unlimited Proxy' has over 1 million downloads. It is distributed via fake installers and lookalike domains.