Malware Spreading via Steam Workshop Wallpapers Poses Risk to Gamers

Malware Spreading via Steam Workshop Wallpapers Poses Risk to Gamers

First seen 16 Jun 2026, 18:58 UTC SecurelistBleepingcomputerFeeds.FeedburnerCybersecuritynewsGadgetreview+8 89% similarity 69.5

Article Content

Browse articles
ThreatCluster

Since late 2025, malware has been proliferating through the Steam Workshop, targeting gamers in China and Russia. Attackers exploit the Wallpaper Engine app to embed malicious code within wallpaper packages, leading to account hijacking and system infections. Researchers from Kaspersky identified various malware types, including the DarkKomet backdoor, infostealers, and cryptominers, hidden in these wallpapers. Many of these malicious files have been downloaded thousands of times. Although Valve has removed the identified threats, experts warn that new malicious wallpapers may continue to appear. Users are advised to scan downloaded content with antivirus software to mitigate risks.

Key Points: • Malware is embedded in wallpapers shared via Steam Workshop's Wallpaper Engine app. • Attackers primarily target gamers in China and Russia, leading to account hijacking. • Kaspersky identified multiple malware types, including DarkKomet and infostealers.

ThreatCluster AI How this analysis works

Timeline

2025-12-01
Malicious wallpapers discovered
Kaspersky researchers found dozens of infected wallpapers on Steam Workshop, leading to account hijacking and system infections.
Securelist
2026-06-16
Kaspersky report published
Kaspersky released findings on malware abuse via Wallpaper Engine, detailing various threats and their impact on users.
Bleepingcomputer
2026-06-16
Valve removes malicious wallpapers
In response to Kaspersky's report, Valve took action to remove the identified malicious wallpapers from Steam Workshop.
Feeds.Feedburner

Community

Browse all →