{"slug": "malware-that-can-steal-your-steam-login-details-found-in-wallpaper-engine-and-by", "title": "Malware that can steal your Steam login details found in Wallpaper Engine and flagged by researchers", "summary": "Researchers at Kaspersky have discovered malware hidden in Wallpaper Engine workshop uploads on Steam that can steal Steam login credentials. The campaign, active since late 2025, primarily targets gamers in China and Russia, using executable wallpapers to distribute malicious code.", "body_md": "👋\nNewsletters\nSubscribe to our newsletters\nSign up for our free, weekly newsletter!\nSubscribe\nBy signing up, you acknowledge our\nprivacy policy\nand may receive occasional deal communications; you can unsubscribe anytime.\nLeave this field empty if you're human:\nPC Guide\nSearch\nComputing\nGaming PC\nTablet PC\nLaptop\nDesktop Computer\nComponents\nGPU\nCPU\nMotherboard\nRAM\nPC Case\nCooling\nPower Supplies (PSU)\nHDD\nSSD\nNetworking & Peripherals\nRouter\nModem\nNAS\nWiFi\nComputer Chair\nMonitor\nKeyboard\nMouse\nComputer Microphone\nHeadset\nComputer Desk\nWebcam\nElectronics\nConsole\nFitness & Tech\nRaspberry Pi\n3D Printer\nTV\nProjector\nVR\nSmart Home\nPrinter\nSoftware\nMicrosoft Office\nWindows 10\nWindows 11\nAndroid\niOS\nApps\nSoftware Downloads\nInternet Safety\nFlight Simulator\nAI\nGuides\nHow To\nCompare\nFAQs\nFeatured\nReview\nNews\nDeals\nPrime Day\nTools\n\n```\nHome > News \n\nMalware that can steal your Steam login details found in Wallpaper Engine and flagged by researchers\n\n                            Don't worry, the Kirby one is safe, but this isn't the first time we've seen malware flagged on Steam                    \n\nAbdul Haddi\n\n \n\nLast Updated on June 19, 2026  \n\n        PC Guide is reader-supported. When you buy through links on our site, we may earn an affiliate commission. Read More\n\nTable of Contents \n\nUsers can upload .exe files to Wallpaper Engine on the Steam Workshop\nEarly Prime Day deals\nPrime Day is coming — don’t miss the deals\nInfected wallpapers are being cleaned up\n\nWallpaper Engine remains one of the most popular (non-game) applications on Steam, giving users the ability to customize their desktops with animated and interactive wallpapers. However, a recent security report has revealed that cybercriminals have been using the platform’s Workshop system to distribute malware, potentially putting thousands of users at risk.\nAccording to researchers at Kaspersky, attackers have been hiding malicious software inside Wallpaper Engine workshop uploads for several months. The campaign reportedly began around late 2025 and has primarily targeted gamers, with a large number of victims located in China and Russia. However, users from several other countries have also been affected.\n\nSign up for our free, weekly newsletter!\n\nSubscribe\n\nBy signing up, you acknowledge our privacy policy and may receive occasional deal communications; you can unsubscribe anytime.Leave this field empty if you’re human: \n\nUsers can upload .exe files to Wallpaper Engine on the Steam Workshop\nWhat makes this issue particularly concerning is the way Wallpaper Engine works. While many wallpapers are simply animated images or videos, the application also supports “application wallpapers.” These are essentially executable (.exe) programs that run directly on a user’s PC as part of the desktop background. Because they function like normal Windows applications, they can also be used to execute malicious code.\n\nEarly Prime Day deals\nPrime Day is almost here, and we've found all the best early deals on tech and gaming.\n\n        AMD Ryzen 7 9800X3D - was $479 now $449\n\n        Samsung 32\" Odyssey G55C - was $329 now $189\n\n        Amazon Kindle Colorsoft Essentials Bundle - was $306.27 now $172.97\n\n        Hisense 100\" U7 Mini-LED - was $4,499 now $2,797\n\n        Skytech Gaming King 95 Gaming PC - was $3,699 now $3,499\n\nPrices correct as of June 18th on Amazon.com.\n\nResearchers discovered multiple infected wallpaper packages that contained hidden malware. In some cases, harmful files were placed directly alongside legitimate wallpaper content. In others, the malicious payload was hidden inside password-protected archives that could automatically extract and launch when the wallpaper was applied.\nOnce activated, the malware could perform several dangerous actions. Some samples were designed to steal Steam login information and hijack active user sessions. Attackers could then gain access to compromised accounts and use them to upload even more infected wallpapers, allowing the campaign to continue spreading through Wallpaper Engine’s Steam Workshop.\n\nPrime Day is coming — don’t miss the deals\n\n      Get ready for exclusive savings with Prime.\nAges 18–24 can get a 6-month Prime trial for $0\n\n      Start your Prime trial →\n    \n\nThe report also found a wide range of malware families being distributed through these uploads. These included information stealers, remote access tools, cryptocurrency miners, ransomware, and other malicious software. Researchers believe multiple threat groups may have been using the same technique rather than a single organization operating the entire campaign.\n\nA trailer for Wallpaper Engine 2.0 – the most recent version (at the time of writing) is version 2.8\nInfected wallpapers are being cleaned up\nThe good news is that the identified malicious wallpapers have reportedly been removed from Steam Workshop. However, security experts warn that similar uploads could appear again in the future. Users should remain cautious when downloading content from unknown creators.\nIt’s not the first time we’ve seen action taken against malicious software distributed through Steam. Last month, Valve was forced to remove a free horror game that was hijacked by a hacker and unsuspectingly fitted with malware.\nIf you’ve recently installed application-type wallpapers from creators you don’t recognize, it may be worth running a full antivirus scan and even changing your Steam password as a precaution.  It’s important to note that Wallpaper Engine itself is not infected, but this incident serves as a reminder that community-created content should always be downloaded carefully, especially when it has the ability to run executable code on your system.\n\n    905Would you buy a bare bones Steam Machine?Would you buy a variant of the Steam Machine with no RAM and/or no SSD and install them separately to help save on costs?     No, I want the Steam Machine to be complete     Yes, I would buy a RAM-less version     Yes, I would buy an SSD-less version     I'd buy a bare bones version with neither component         \n\nAbout the Author\n\nAbdul Haddi\n\n \n\nAbdul is a tech writer and Editor for PC Guide, specializing in all things tech, gaming, and hardware.\n\nLoad More\n\nYou can trust PC Guide\n\nOur team of experts use a combination of independent consumer research, in-depth testing where appropriate - which will be flagged as such, and market analysis when recommending products, software and services. Find out how we test here.\n\n Follow us\n\nTable of Contents \nUsers can upload .exe files to Wallpaper Engine on the Steam WorkshopInfected wallpapers are being cleaned up \n\nRelated Articles\n\n \n\nToday’s NYT Strands answers, clues, and hints on June 19 (#838)\n\nLast Updated Jun 19, 2026· by Jack Goodall\n\n \n\nToday’s NYT Connections answers, hints, and clues on June 19 (#1104)\n\nLast Updated Jun 19, 2026· by Jack Goodall\n\n \n\nApple CEO hints at your next iPhone being more expensive, as “unavoidable” price increases announced\n\nLast Updated Jun 18, 2026· by Abdul Haddi\n\n \n\nToday’s Wordle answer, hints and clues on June 19 (#1826)\n\nLast Updated Jun 18, 2026· by Jack Goodall\n\nAbout Us\nContact\nEarnings Disclaimer\nPrivacy Policy\nSitemap\n \n\nOur Sites:\n\nBlack Friday TV Deals\nPC Builder\nMovies Like\n \n\nCopyright © 2026 PC Guide. All rights reserved.\n\n​\n```\n\n", "url": "https://wpnews.pro/news/malware-that-can-steal-your-steam-login-details-found-in-wallpaper-engine-and-by", "canonical_source": "https://www.pcguide.com/news/malware-that-can-steal-your-steam-login-details-found-in-wallpaper-engine-and-flagged-by-researchers/", "published_at": "2026-06-19 08:34:42+00:00", "updated_at": "2026-06-19 09:18:26.299402+00:00", "lang": "en", "topics": ["ai-safety"], "entities": ["Kaspersky", "Steam", "Wallpaper Engine", "Abdul Haddi"], "alternates": {"html": "https://wpnews.pro/news/malware-that-can-steal-your-steam-login-details-found-in-wallpaper-engine-and-by", "markdown": "https://wpnews.pro/news/malware-that-can-steal-your-steam-login-details-found-in-wallpaper-engine-and-by.md", "text": "https://wpnews.pro/news/malware-that-can-steal-your-steam-login-details-found-in-wallpaper-engine-and-by.txt", "jsonld": "https://wpnews.pro/news/malware-that-can-steal-your-steam-login-details-found-in-wallpaper-engine-and-by.jsonld"}}