RandomQuery is a Windows keylogger and malware family used by Kimsuky for intelligence collection. In documented intrusions it was installed after operators gained access, alongside tools such as MySpy and RDPWrap, to capture keystrokes entered by victims. Other reporting places it in multi-stage campaigns with open-source remote-access tools and custom backdoors, and some chains distributed it together with FlowerPower. The family supports credential and sensitive-information theft, but capabilities can vary across the scripts and versions grouped under the name.