Back Securityaffairs.Co

GodDamn Ransomware Uses PoisonX to Blind Security Software

Securityaffairs.Co •Pierluigi Paganini • July 9, 2026

GodDamn ransomware uses the signed PoisonX driver to disable security tools, marking a more advanced version of the Beast ransomware family. Symantec’s Threat Hunter Team found a new ransomware family called GodDamn that first appeared in the wild on May 21, 2026, and analyzed an attack that took place in early June. The group behind […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Ransomware Fuels Surge in Global Cyberattacks As of February 12, 2026, organizations worldwide are experiencing an average of 2,090 cyber-attacks per week, largely driven by ransomware incidents. This increase highlights the ongoing challenges faced by businesses in securing their networks against evolving cyber threats. 1498 sources 64

Extracted Entities

GodDamn Ransomware Uses PoisonX to Blind Security Software

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Ransomware Groups (2)

Tools (1)