Gamers beware experts flag Steam Workshop is being abused to spread malware via Wallpaper Engine app

Date:
Wed, 17 Jun 2026 17:15:00 +0000

Description:
Even a wallpaper can carry a virus these days, so be careful what you're downloading.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Kaspersky found Steam Workshop wallpapers weaponized to deliver malware via Wallpaper Engine Dozens of malicious application wallpapers downloaded tens of thousands of times, spreading backdoors, infostealers, miners, and ransomware Valve removed the infected uploads, but users warned attackers could easily reupload new ones Steam Workshop, a community platform built into Steam that allows users to share custom content, was being used to infect gamers with malware, researchers have claimed.

For at least half a year, gamers that used the platform to download certain wallpapers were being served various malware, Kaspersky recently explained. This campaign has been running since at least late 2025, Kaspersky said -
with some sources noting the majority of the victims are in Russia and China
. Latest Videos From Watch full video here: Dozens of malicious wallpapers Steam is a hugely popular digital distribution platform for PC games, developed by a company called Valve. Baked into it is Workshop, a community tool where gamers can share mods, maps, skins, wallpapers, and other add-ons for games and applications.

Among other things, Steam Workshop allows gamers to use Wallpaper Engine, a desktop customization application that supports more than just static image wallpapers. With it, gamers can have videos, interactive animations, and even entire applications, displayed as a wallpaper. You may like Steam Community Profiles abused as C2 network in new WordPress malware infection campaign Experts warn that free image editor tool could actually be dangerous malware Hackers are using TikTok videos offering 'free Spotify Premium' to spread malware and steal passwords

And that is where the problem lies - hackers have been using application wallpapers as delivery mechanisms for different malware , including backdoors and cryptojackers.

"We discovered dozens of these malicious application wallpapers floating around Steam Workshop, and each one had already been downloaded thousands or even tens of thousands of times," Kaspersky said. Are you a pro? Subscribe
to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

Looking deeper into the weaponized wallpapers, Kaspersky found that the malware is often either bundled in the package, or delivered inside a password-protected archive. The payload itself gets executed automatically
the moment the user installs the wallpaper, it was said. In one example, Kaspersky was served a backdoor, and in another, an infostealer. Lumma and Vidar infostealers, cryptocurrency miners, botnet loaders, RanEngine, and
even ransomware strains, were all being distributed this way.

Kaspersky disclosed its findings only after Steam identified and removed all of the malicious wallpaper applications. However, users should approach with caution, because theres nothing stopping the threat actors from simply uploading new ones.

Via BleepingComputer The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/gamers-beware-experts-flag-steam-worksh op-is-being-abused-to-spread-malware-via-wallpaper-engine-app


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)