Gamers beware: malicious wallpapers on Steam found stealing accounts
speckx
45 points
26 comments
June 16, 2026
Related Discussions
Found 5 related stories in 113.4ms across 10,715 title embeddings via pgvector HNSW
- Valve removes free game from Steam after players discover it contains malware gpi · 99 pts · May 22, 2026 · 61% similar
- Hackers breach JDownloader's website to serve malware-laced downloads bundie · 110 pts · May 08, 2026 · 49% similar
- Hackers are now using ChatGPT share links to deliver malware bundie · 19 pts · May 29, 2026 · 48% similar
- Rockstar Games Hacked, Hackers Threaten a Massive Data Leak If Not Paid Ransom c420 · 99 pts · April 11, 2026 · 45% similar
- For the 2nd time in weeks, Microsoft packages laced with credential stealer cdrnsf · 40 pts · June 08, 2026 · 45% similar
Discussion Highlights (4 comments)
beart
So this vulnerability isn't directly the result of using Steam, or any of the Steam profile customizations, such as avatars and profile page backgrounds. But rather, it is a vulnerability in a third-party application "Wallpaper Engine" which is available on Steam. I recall when screen savers were a common malware vector on Windows. I suppose everything old is new again.
jjmarr
I love how the post is clearly written by AI. A human might've noticed all the screenshots appear to be of interactive hentai games distributed through Wallpaper Engine. And wouldn't have said: > On the surface, this wallpaper sample (above) we uncovered in December 2025 looks completely harmless. In reference to a screenshot of an anime woman with ripped clothes, eyes in fear, being monitored by CCTV camera. From my knowledge, "adult entertainment" is targeted by malware because it's socially embarrassing to admit that was the attack vector. It's relevant to point that out.
ApolloFortyNine
Wallpaper Engine is pretty old now, and I remember using it years ago reading warning about not downloading unknown wallpapers. I believe there's even settings in the configuration not to run arbitrary code. 8 year old post about it, but honestly pretty sure it's been warned since day 1. [1] [1] https://www.reddit.com/r/wallpaperengine/comments/7xg27d/rem...
wxw
> The whole concept of “application wallpapers” essentially allows foreign code to be run directly on your computer. Cybercriminals took note of this feature and started embedding malware right into these types of wallpapers. > Because Wallpaper Engine relies on Steam Workshop for content sharing, anyone can create a wallpaper and publish it for the community to download and install for free. RIP