New Rugmi Malware Loader Surges with Hundreds of Daily Detections

ESET and other vendors observed a surge in detections for a new loader (Win/TrojanDownloader.Rugmi) used to deliver multiple information-stealing malware families (Lumma, Vidar, RecordBreaker/Raccoon V2, Rescoms) via channels such as malvertising, fake updates, cracked software and Discord CDN; the report also notes a new NetSupport RAT variant being abused by initial access brokers and highlights MaaS distribution and evolving evasion tactics.