Skip to content
Malware Spreading via Steam Workshop Wallpapers Poses Risk to Gamers

Malware Spreading via Steam Workshop Wallpapers Poses Risk to Gamers

First seen 16 Jun 2026, 18:58 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster June 17, 2026 at 18:57 UTC

Since late 2025, malware has been proliferating through the Steam Workshop, targeting gamers in China and Russia. Attackers exploit the Wallpaper Engine app to embed malicious code within wallpaper packages, leading to account hijacking and system infections. Researchers from Kaspersky identified various malware types, including the DarkKomet backdoor, infostealers, and cryptominers, hidden in these wallpapers. Many of these malicious files have been downloaded thousands of times. Although Valve has removed the identified threats, experts warn that new malicious wallpapers may continue to appear. Users are advised to scan downloaded content with antivirus software to mitigate risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 94d ago How this analysis works

Timeline

2025-12-01
Malicious wallpapers discovered
Kaspersky researchers found dozens of infected wallpapers on Steam Workshop, leading to account hijacking and system infections.
Securelist
2026-06-16
Kaspersky report published
Kaspersky released findings on malware abuse via Wallpaper Engine, detailing various threats and their impact on users.
Bleepingcomputer
2026-06-16
Valve removes malicious wallpapers
In response to Kaspersky's report, Valve took action to remove the identified malicious wallpapers from Steam Workshop.
Feeds.Feedburner

More articles in this cluster (13)

Following this threat?

Track DarkKomet and Valve in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed