Steam users warned hackers are using Wallpaper Engine to steal accounts – Dexerto

Steam users are being urged to be careful when downloading custom wallpapers after a malware campaign was discovered in Wallpaper Engine.
The warning comes from cybersecurity company Kaspersky, which says attackers have been hiding malicious software inside wallpaper downloads shared through Wallpaper Engine, one of Steam‘s most popular customization apps.
According to the report, dozens of infected wallpapers were discovered, with some racking up thousands or even tens of thousands of downloads before being identified. The malware was reportedly designed to steal accounts and other sensitive information from infected PCs.
Researchers say the campaign has been active since late 2025 and primarily targeted users in China and Russia, though victims were also identified in countries including Germany, India, Singapore, Canada, Hong Kong, and Vietnam.
This doesn’t mean Steam itself has been hacked. Instead, attackers appear to have taken advantage of user-generated uploads, hiding malware inside content that looked legitimate on the surface. In some cases, the wallpapers appeared to run perfectly, while messing with the user’s Steam library in the background.
For many Steam users, Wallpaper Engine is a harmless way to customize their desktop with animated backgrounds. However, unlike standard image files, some wallpapers can run applications on a user’s PC, creating an opportunity for attackers to disguise malware as legitimate content.
Steam users who regularly download Workshop content should take extra care when installing wallpapers or applications from unknown creators. Researchers recommend checking a creator’s reputation, reading community feedback, and ensuring security software is active before downloading files.
Steam’s Wallpaper Engine is removing thousands of wallpapers after hacks
Valve issues warning as cyberattack leaks personal data of Steam hardware buyers
Meccha Chameleon malware maps lead to official Discord server takeover
Kaspersky has encouraged anyone using the platform to check the creators they download any wallpapers from before installing. It also recommends using cybersecurity software to detect threats early.
Anyone concerned they may have installed an infected wallpaper should run a full malware scan and change passwords for important accounts, especially Steam, email, and any linked payment services.
Steam is the biggest platform in PC gaming, which means it’s also the target of many hacks. Back in May, a game had to be removed after it was accused of stealing passwords.
Sign up to Dexerto for the latest news, views & reviews

source