Malware that can steal your Steam login details found in Wallpaper Engine and flagged by researchers

Researchers at Kaspersky have discovered malware hidden in Wallpaper Engine workshop uploads on Steam that can steal Steam login credentials. The campaign, active since late 2025, primarily targets gamers in China and Russia, using executable wallpapers to distribute malicious code.

👋 Newsletters Subscribe to our newsletters Sign up for our free, weekly newsletter Subscribe By signing up, you acknowledge our privacy policy and may receive occasional deal communications; you can unsubscribe anytime. Leave this field empty if you're human: PC Guide Search Computing Gaming PC Tablet PC Laptop Desktop Computer Components GPU CPU Motherboard RAM PC Case Cooling Power Supplies PSU HDD SSD Networking & Peripherals Router Modem NAS WiFi Computer Chair Monitor Keyboard Mouse Computer Microphone Headset Computer Desk Webcam Electronics Console Fitness & Tech Raspberry Pi 3D Printer TV Projector VR Smart Home Printer Software Microsoft Office Windows 10 Windows 11 Android iOS Apps Software Downloads Internet Safety Flight Simulator AI Guides How To Compare FAQs Featured Review News Deals Prime Day Tools Home News Malware that can steal your Steam login details found in Wallpaper Engine and flagged by researchers Don't worry, the Kirby one is safe, but this isn't the first time we've seen malware flagged on Steam Abdul Haddi Last Updated on June 19, 2026 PC Guide is reader-supported. When you buy through links on our site, we may earn an affiliate commission. Read More Table of Contents Users can upload .exe files to Wallpaper Engine on the Steam Workshop Early Prime Day deals Prime Day is coming — don’t miss the deals Infected wallpapers are being cleaned up Wallpaper Engine remains one of the most popular non-game applications on Steam, giving users the ability to customize their desktops with animated and interactive wallpapers. However, a recent security report has revealed that cybercriminals have been using the platform’s Workshop system to distribute malware, potentially putting thousands of users at risk. According to researchers at Kaspersky, attackers have been hiding malicious software inside Wallpaper Engine workshop uploads for several months. The campaign reportedly began around late 2025 and has primarily targeted gamers, with a large number of victims located in China and Russia. However, users from several other countries have also been affected. Sign up for our free, weekly newsletter Subscribe By signing up, you acknowledge our privacy policy and may receive occasional deal communications; you can unsubscribe anytime.Leave this field empty if you’re human: Users can upload .exe files to Wallpaper Engine on the Steam Workshop What makes this issue particularly concerning is the way Wallpaper Engine works. While many wallpapers are simply animated images or videos, the application also supports “application wallpapers.” These are essentially executable .exe programs that run directly on a user’s PC as part of the desktop background. Because they function like normal Windows applications, they can also be used to execute malicious code. Early Prime Day deals Prime Day is almost here, and we've found all the best early deals on tech and gaming. AMD Ryzen 7 9800X3D - was $479 now $449 Samsung 32" Odyssey G55C - was $329 now $189 Amazon Kindle Colorsoft Essentials Bundle - was $306.27 now $172.97 Hisense 100" U7 Mini-LED - was $4,499 now $2,797 Skytech Gaming King 95 Gaming PC - was $3,699 now $3,499 Prices correct as of June 18th on Amazon.com. Researchers discovered multiple infected wallpaper packages that contained hidden malware. In some cases, harmful files were placed directly alongside legitimate wallpaper content. In others, the malicious payload was hidden inside password-protected archives that could automatically extract and launch when the wallpaper was applied. Once activated, the malware could perform several dangerous actions. Some samples were designed to steal Steam login information and hijack active user sessions. Attackers could then gain access to compromised accounts and use them to upload even more infected wallpapers, allowing the campaign to continue spreading through Wallpaper Engine’s Steam Workshop. Prime Day is coming — don’t miss the deals Get ready for exclusive savings with Prime. Ages 18–24 can get a 6-month Prime trial for $0 Start your Prime trial → The report also found a wide range of malware families being distributed through these uploads. These included information stealers, remote access tools, cryptocurrency miners, ransomware, and other malicious software. Researchers believe multiple threat groups may have been using the same technique rather than a single organization operating the entire campaign. A trailer for Wallpaper Engine 2.0 – the most recent version at the time of writing is version 2.8 Infected wallpapers are being cleaned up The good news is that the identified malicious wallpapers have reportedly been removed from Steam Workshop. However, security experts warn that similar uploads could appear again in the future. Users should remain cautious when downloading content from unknown creators. It’s not the first time we’ve seen action taken against malicious software distributed through Steam. Last month, Valve was forced to remove a free horror game that was hijacked by a hacker and unsuspectingly fitted with malware. If you’ve recently installed application-type wallpapers from creators you don’t recognize, it may be worth running a full antivirus scan and even changing your Steam password as a precaution. It’s important to note that Wallpaper Engine itself is not infected, but this incident serves as a reminder that community-created content should always be downloaded carefully, especially when it has the ability to run executable code on your system. 905Would you buy a bare bones Steam Machine?Would you buy a variant of the Steam Machine with no RAM and/or no SSD and install them separately to help save on costs? No, I want the Steam Machine to be complete Yes, I would buy a RAM-less version Yes, I would buy an SSD-less version I'd buy a bare bones version with neither component About the Author Abdul Haddi Abdul is a tech writer and Editor for PC Guide, specializing in all things tech, gaming, and hardware. Load More You can trust PC Guide Our team of experts use a combination of independent consumer research, in-depth testing where appropriate - which will be flagged as such, and market analysis when recommending products, software and services. Find out how we test here. Follow us Table of Contents Users can upload .exe files to Wallpaper Engine on the Steam WorkshopInfected wallpapers are being cleaned up Related Articles Today’s NYT Strands answers, clues, and hints on June 19 838 Last Updated Jun 19, 2026· by Jack Goodall Today’s NYT Connections answers, hints, and clues on June 19 1104 Last Updated Jun 19, 2026· by Jack Goodall Apple CEO hints at your next iPhone being more expensive, as “unavoidable” price increases announced Last Updated Jun 18, 2026· by Abdul Haddi Today’s Wordle answer, hints and clues on June 19 1826 Last Updated Jun 18, 2026· by Jack Goodall About Us Contact Earnings Disclaimer Privacy Policy Sitemap Our Sites: Black Friday TV Deals PC Builder Movies Like Copyright © 2026 PC Guide. All rights reserved. ​