Skip to content
brandefense.io
Request A Demo
UnclassifiedUnknown

Rugmi

Rugmi is a threat actor group, tracked by Brandefense.

Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
First seen
Feb 13, 2024
Last seen
Feb 13, 2024
Record updated

About Rugmi.

Telemetry showed detections rising from single digits to hundreds per day in October-November 2023. Observed payloads include Lumma Stealer (LummaC2), Vidar, RecordBreaker (Raccoon Stealer V2), and Rescoms. Later reporting groups Rugmi with HijackLoader, GhostPulse, and IDAT Loader aliases. Malpedia tracks the family as win.rugmi.

Last updated Sep 12, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.