You're viewing a limited, public preview. Log in for full access.
No AI analysis yet.
According to FireEye, GEARSHIFT is a memory-only dropper for two keylogger DLLs. It is designed to replace a legitimate Fax Service DLL. Attributed to: APT41.
This link opens an external site that isn't part of the platform.