GodDamn ransomware hijacks signed PoisonX driver to blind endpoint security
Symantec’s Threat Hunter Team discovered GodDamn ransomware leveraging a Microsoft‑signed PoisonX kernel driver to disable AV/EDR defenses via a BYOVD attack. The same campaign combined AnyDesk remote access, NirSoft credential theft tools, and PsExec lateral movement, marking a sophisticated escalation in ransomware evasion tactics.