Do Son GodDamn ransomware is the latest Beast ransomware rebrand from Hyadina. It uses a Microsoft-signed malicious kernel driver, PoisonX, to disable EDR.
Beast Ransomware
AhnLab exposed Beast ransomware (Monster evolution) as a new RaaS threat, with 16+ victims by August 2025. It uses ChaCha20 encryption, deletes Shadow Copies, and features a hidden GUI control panel.
Uncover the evolving Beast Ransomware, a popular RaaS platform actively targeting organizations. Explore its customizable options for Windows, Linux, and VMware ESXi servers.