The malware’s developers have turned to dynamic link libraries (DLLs) to hide their work.

from Dark Reading: https://ift.tt/2PTyEvU
via IFTTT