> TritonInfoSec News
Home / Jul 10, 2026 / Story
0
#4 The Hacker News general July 09, 2026 at 10:43 UTC

GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses

By [email protected] (The Hacker News)

AI Summary

Symantec's Threat Hunter Team identified 'GodDamn' ransomware, first spotted in the wild on May 21, 2026, as a rebrand of Beast ransomware. It employs a Bring Your Own Vulnerable Driver (BYOVD) technique via the Microsoft co-signed PoisonX kernel driver to disable endpoint security software before encrypting targets, primarily in the United States.

Read full article → https://thehackernews.com/2026/07/goddamn-ransomwa…

Relevance score: 82.0/100

# More from July 10

  1. 1
    15-Year-Old Linux Vulnerability ‘GhostLock’ Earns Researchers $92k From Google SecurityWeek
  2. 2
    Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges The Hacker News
  3. 3
    GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents The Hacker News
  4. 5
    12 Million Impacted by Data Breach at Japanese Telco KDDI SecurityWeek
  5. 6
    Chrome 150 Update Patches 27 Vulnerabilities SecurityWeek
  6. 7
    New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware The Hacker News
  7. 8
    Interpol cybercrime crackdown nets 5,800 arrests across 97 countries CyberScoop
  8. 9
    Palo Alto Networks Patches 13 Vulnerabilities SecurityWeek
  9. 10
    npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk The Hacker News