Anime Girls Could Steal Your Crypto as Wallpaper Malware Targets Steam Gamers
Compiled by KHAO Editorial — aggregated from 1 source. See llms.txt for citation guidance.
★ Tier-1 Source
In the report published on Monday, Kaspersky said attackers used Steam Workshop to distribute malicious Wallpaper Engine downloads disguised as animated desktop wallpapers, many featuring female anime characters.
Key facts
- In July 2025, researchers with cybersecurity firm Prodaft reported that the Steam Early Access game Chemia had been compromised to distribute Hijack Loader, Fickle Stealer, and Vidar Stealer malware
- In the report published on Monday, Kaspersky said attackers used Steam Workshop to distribute malicious Wallpaper Engine downloads disguised as animated desktop wallpapers, many featuring female
- The malicious wallpapers either bundled malware directly or hid it inside password-protected archives that unpacked after installation, the company said, noting a 2025 case where a wallpaper appeared
- The application-based wallpaper feature allows executable programs to run directly on a user's Windows computer, allowing attackers to distribute malicious software under the guise of legitimate
Summary
Kaspersky found malicious Wallpaper Engine downloads on Steam Workshop with thousands of installs. The malware stole Steam credentials, hijacked active sessions, and deployed additional payloads, including Lumma and Vidar infostealers. The discovery follows a series of Steam-related malware incidents that have targeted gamers and crypto holders. “The application-based wallpaper feature allows executable programs to run directly on a user's Windows computer, allowing attackers to distribute malicious software under the guise of legitimate content,” Kaspersky said, adding that it had identified dozens of infected wallpaper packages available through Steam Workshop.