Lemon Group Uses Millions of Pre-Infected Android Phones to Enable Cybercrime Enterprise Lemon Group's Guerrilla malware model an example of how threat actors are monetizing compromised Android devices, researchers say. https://www.darkreading.com/threat-intelligence/threat-actor-millions-pre-infected-android-phones-cybercrime-enterprise