--- title: "Steam Workshop abused to spread malware via Wallpaper Engine app" url: https://daily.dev/posts/steam-workshop-abused-to-spread-malware-via-wallpaper-engine-app-dgbs35bbi source_url: https://www.bleepingcomputer.com/news/security/steam-workshop-abused-to-spread-malware-via-wallpaper-engine-app type: article source: "BleepingComputer" published: 2026-06-16T18:31:39.985Z updated: 2026-06-16T19:03:23.477Z tags: ["cyber", "malware", "steam"] reading_time: 3 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Steam Workshop abused to spread malware via Wallpaper Engine app **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 0 upvotes · 0 comments ## Summary Threat actors have been abusing Steam Workshop since at least late 2025 to distribute malware hidden inside Wallpaper Engine application wallpapers. Because Wallpaper Engine supports executable Windows applications as wallpapers, attackers uploaded malicious packages that auto-execute upon installation. Kaspersky researchers found dozens of such wallpapers, each downloaded thousands of times, delivering payloads including the DarkKomet backdoor, Lumma and Vidar infostealers, cryptocurrency miners, botnet loaders, and ransomware. Steam has removed the identified malicious wallpapers, but researchers warn new ones are likely to appear. Users are advised to scan Workshop downloads with up-to-date antivirus software. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Gamers beware: malicious wallpapers on Steam found stealing accounts](https://daily.dev/posts/gamers-beware-malicious-wallpapers-on-steam-found-stealing-accounts-t5dyzolxy) · Securelist · 0 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#malware](https://daily.dev/tags/malware), [#steam](https://daily.dev/tags/steam) [View this post on daily.dev](https://daily.dev/posts/steam-workshop-abused-to-spread-malware-via-wallpaper-engine-app-dgbs35bbi)