en
BlankGrabberBlank-c/Blank-GrabberBlank Grabber (also known as BlankGrabber and Blank-c/Blank-Grabber) is an information-stealing malware family. Blank Grabber targets browser credentials, cryptocurrency wallets, Steam/Telegram/Discord session tokens, Roblox cookies and Minecraft sessions, Wifi passwords and webcam captures and System hardware and locale inventory. As of 11/10/2026, CyStack's research records 3 variants, with high attribution confidence.
Note: This data is provided for reference and cybersecurity research only.
CyStack recommends that users do not use this information for unlawful purposes
Original English
Blank Grabber is a Python-based open-source info-stealer hosted on GitHub (Blank-c/Blank-Grabber). Low-skill actors compile it with PyInstaller and distribute it via cracked software lures, weaponised PyPI packages, and Discord or Telegram dropper campaigns. Exfiltration goes through a Discord or Telegram webhook, so no dedicated C2 panel is needed.
The exfil archive contains a top-level Information.txt
whose banner reads Blank Grabber got a new victim: <name>,
followed by an IP Info block (ip-api.com data), a
System Info block (Computer Name, OS, RAM, UUID, CPU,
GPU, Product Key), and a Grabbed Info summary that counts
each data category (Discord Accounts, Passwords, Cookies,
Roblox Cookies, Telegram Sessions, Wallets, Wifi, etc.).
Infostealer data represents only a fraction of modern data theft threats. With the Threat Intelligence component in the CyStack VulnScan solution suite, organizations can investigate each threat and credential exposure in depth, mapping C2, IOCs, and other actionable threat intelligence.
3 variants recorded for this malware
| ID | Data collected | Confidence |
|---|---|---|
b1e576b... | 65 | High |
ccdf4b8... | 12,707 | High |
d119222... | 1 | High |
To see more variants, organizations should use dedicated solutions such as CyStack Threat Intelligence
IP: <value>Region: <value>Country: <value>Timezone: <value> Cellular Network:<value>Proxy/VPN: <value>Reverse DNS: <value> Computer Name: <value>Computer OS: <value>Total Memory: <value>UUID: <value>CPU: <value>GPU: <value>Product Key: <value> Discord Accounts : <value>Passwords : <value>Cookies : <value>History : <value>Autofills : <value>Roblox Cookies : <value>Telegram Sessions : <value>Common Files : <value>Wallets : <value>Wifi Passwords : <value>Webcam : <value>Minecraft Sessions : <value>Epic Session : <value>Steam Session : <value>Uplay Session : <value>Growtopia Session : <value>Screenshot : <value>System Info : <value>
