PoisonX is a malicious kernel driver used in BYOVD attacks to disable security software. It was signed by Microsoft, allowing it to load automatically on Windows systems. It has been adopted by multiple ransomware groups, including GodDamn and The Gentlemen RaaS.