> but the real issue appears to have been the apps’ use of resource-monetization services that grant cybercriminals access to devices and residential IPs for malicious activity.

So the apps are malware that function as residential proxies.

Way to bury the lede.