Listen to the episode
TLDR
Kaspersky researchers have uncovered dozens of malicious wallpapers circulating on Steam Workshop, distributed via the popular Wallpaper Engine app. Attackers, mainly targeting gamers in China and Russia, hide malware inside "application...
How it works
Kaspersky researchers have uncovered dozens of malicious wallpapers circulating on Steam Workshop, distributed via the popular Wallpaper Engine app. Attackers, mainly targeting gamers in China and Russia, hide malware inside "application...
Red flags
- Wallpaper is an "application" type (a real executable), not a simple video or HTML scene Archive arrives password protected and the password is listed in the filename or a JSON config The package contains extra EXE/DLL/script files beyond what the wallpaper visibly needs
What to do
- 1Avoid downloading application type wallpapers from unknown or unverified Steam Workshop authors Check community reviews, download counts, and author history before installing any custom wallpaper Run a repu
Source
securelist
Source reviewed by Mythos Forensic Team
https://securelist.com/dozens-of-malicious-wallpapers-found-on-steam-workshop/120186/FAQ
Is Malicious wallpapers on Steam Workshop hijack gamer accounts and plant malware a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Wallpaper is an "application" type (a real executable), not a simple video or HTML scene Archive arrives password protected and the password is listed in the filename or a JSON config The package contains extra EXE/DLL/script files beyond what the wallpaper visibly needs
What should I do first?
Avoid downloading application type wallpapers from unknown or unverified Steam Workshop authors Check community reviews, download counts, and author history before installing any custom wallpaper Run a repu
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.