Payload - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/tags/payload/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 05 Nov 2026 13:39:49 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgRugmi malware identified in the wildhttps://feed.craftedsignal.io/briefs/2026-11-rugmi-malware/Thu, 05 Nov 2026 13:39:49 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-rugmi-malware/A new sample of the Rugmi malware family (sha256: 2ffcecf20d5601ccbed1d74da694d41673d06b759681e3d9585faa241f5bb7f9) has been observed as a Windows-based payload.On 2026-11-04, an additional indicator of compromise associated with the Rugmi malware family was identified. The observed artifact is a Windows executable payload.

Recommendation

  • Block the SHA-256 hash identified in the IOC table on all security endpoints.
  • Implement file integrity monitoring and endpoint scanning to identify presence of the Rugmi payload.
]]>mediumadvisorymalwarepayloadwindows