Steam Workshop wallpapers spread malware via Wallpaper Engine

Kaspersky discovered dozens of malicious application wallpapers on Steam Workshop that delivered backdoors, infostealers, miners, and ransomware via Wallpaper Engine. The campaign has run since at least late 2025, with downloads in the tens of thousands. Valve removed the infected uploads, but attackers could re-upload new ones.