Two Stealers, Two Prizes: Seven Days in the Infostealer Market's Blind Spot: Most infostealer reporting draws on the same mainstream feeds and tells the same story about Lumma, RedLine and Vidar. Our collection looks where those feeds rarely reach, and there, half of the infections we tracked over seven days came from a single free, open-source stealer. Among the malware behind the rest, one family stands out for a completely different appetite. Blank Grabber harvests Discord accounts at volume; WorldWind goes after Telegram sessions and crypto wallets. Together they describe a commodity market that no longer needs skill and is starting to specialize.