Millenium RAT keylogger writes randomized log file under hidden %APPDATA% folder

Duo Tech@duotech

•updated Jul 2, 2026•6•0•2

Detects potential keylogging activity associated with Millenium RAT, characterized by the creation of log files with randomized 8-12 character filenames and folder names within the %APPDATA%\Roaming directory.