Home / Technology / Hackers Hijack Steam Accounts Via Wallpapers
Hackers Hijack Steam Accounts Via Wallpapers
17 Jun
Summary
- Cybercriminals use Wallpaper Engine app to infect Steam accounts.
- Malicious application wallpapers install backdoors and steal credentials.
- Kaspersky alerted Valve, leading to removal of infected Steam Workshop items.

Cybercriminals have shifted their attack vector to target Steam accounts through the widely used Wallpaper Engine application, according to recent reports. Instead of exploiting games, hackers are embedding malicious code into desktop wallpapers distributed via the Steam Workshop.
These infected wallpapers, especially those designed as dynamic or application-based content, pose a significant security risk. Researchers discovered that these malicious files, when installed, can deploy backdoors, such as the DarkKomet malware, and custom libraries designed to steal Steam credentials. Other malware families like Lumma and Vidar infostealers have also been found within these compromised assets.
Following an alert from cybersecurity firm Kaspersky, Valve has taken action to remove the infected wallpapers from the Steam Workshop. This development underscores the ongoing need for vigilance among gamers when downloading any digital content, emphasizing the importance of reliable antivirus protection and careful selection of trusted creators.