Malicious Wallpaper Engine Downloads on Steam Workshop Stole Steam Credentials, Kaspersky Says

Kaspersky reported that malicious Wallpaper Engine downloads on Steam Workshop were installed thousands of times and were used to steal Steam credentials and compromise user accounts. According to NS3.AI, the malware hijacked active Steam sessions and deployed the Lumma and Vidar infostealers. Kaspersky said the victims were primarily located in China and Russia. The company did not provide additional details in the report beyond the scope of the affected platform, the malware’s credential-theft and session-hijacking behavior, and the regions where most victims were identified.