Microsoft signed a malicious kernel driver, and now it's being used to kill security software in ransomware attacks.

GodDamn ransomware, tied by Symantec to Hyadina's Beast lineage, uses AnyDesk, PsExec, and PoisonX to move and evade defenses.

Microsoft signed a malicious kernel driver, and now it's being used to kill security software in ransomware attacks.