Ransomware crews are no longer just encrypting files and hoping for Bitcoin. GodDamn ransomware, the latest face of the Hyadina family (formerly Beast and Monster), now drops a malicious kernel driver called PoisonX that carries a legitimate Microsoft signature and terminates security products before encryption begins. Symantec researchers spotted the group hiding AnyDesk in a 'Music' folder, then using a file disguised as a Symantec product to plant the driver. Once...