Description
Rugmi is a malware loader that delivers various payloads, including information stealers such as LummaStealer, onto infected systems. Its operators distribute it through malvertising, fake software downloads, and search engine poisoning, and it fetches follow on payloads from infrastructure that rotates to survive takedowns. Detections under this name indicate that a system executed a stage in a broader infection chain, so responders should hunt for the payloads it fetched.
Stats
- First seen
- November 2023
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Binary.Trojan.Rugmi |
| ByteCode-MSIL.Trojan.Rugmi |
| Gen:Variant.Rugmi.17 |
| Trojan.Rugmi.1.Gen |
| Trojan.Rugmi.10 |
| Trojan.Rugmi.12 |
| Trojan.Rugmi.13 |
| Trojan.Rugmi.17 |
| Trojan.Rugmi.2.Gen |
| Trojan.Rugmi.39977569 |