Hackers Abuse Steam Workshop Application Wallpapers to Hijack Active Steam Sessions

Cybersecuritynews •Guru Baran • June 17, 2026

Threat actors have been abusing Valve’s Steam Workshop since late 2025, embedding malware inside Wallpaper Engine application wallpapers to hijack active Steam sessions and infect victims with backdoors, infostealers, and crypto miners, with 89% of targets located in China, according to a new Kaspersky report. Wallpaper Engine is a hugely popular Steam application that lets […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malware Spreading via Steam Workshop Wallpapers Poses Risk to Gamers Since late 2025, malware has been proliferating through the Steam Workshop, targeting gamers in China and Russia. Attackers exploit the Wallpaper Engine app to embed malicious code within wallpaper packages, leading to account hijacking and system infections. Researchers from Kaspersky identified various malware types, including the DarkKomet backdoor, infostealers, and cryptominers, hidden in these wallpapers. Many of these malicious files have been downloaded thousands of times. Although Valve has removed the identified threats, experts warn that new malicious wallpapers may continue to appear. Users are advised to scan downloaded content with antivirus software to mitigate risks. 10 sources 70

Extracted Entities

Hackers Abuse Steam Workshop Application Wallpapers to Hijack Active Steam Sessions

The full story

Extracted Entities

Attack Types (2)

Countries (1)

MITRE ATT&CK (1)

Platforms (2)