Millenium RAT Discord and Telegram Session Token Theft from AppData

Ibrahim Saud@tektrix

•updated Jun 30, 2026•1•0•2

Detects unauthorized processes reading or opening files located within the data directories of Discord or Telegram Desktop. These directories often store sensitive user data, including session tokens and local databases, which are common targets for info-stealing malware.