New Ransomware Exploits Malicious Driver to Remove Cybersecurity Protections

A newly discovered ransomware variant, known as GodDamn, leverages a malicious kernel driver called PoisonX to dismantle cybersecurity protections within compromised networks. This driver enables the ransomware to move undetected through remote desktop applications, allowing it to spread laterally and evade detection. By exploiting this vulnerability, GodDamn ransomware can effectively remove security controls, leaving systems exposed to further exploitation. The use of PoisonX kernel driver signifies a notable escalation in ransomware tactics, as it grants attackers unprecedented control over infected systems. The emergence of this ransomware strain highlights the importance of staying abreast of the latest security developments, as awareness of such threats is crucial for effective defense¹. This newfound capability to subvert security measures makes GodDamn a particularly formidable foe, and its discovery serves as a stark reminder of the need for continuous vigilance in the face of evolving cyber threats.