Hackers are abusing the Steam Workshop

Hackers are abusing the Steam Workshop to spread malware through the Wallpaper Engine app. Researchers at Kaspersky found dozens of malicious wallpapers spreading through Steam Workshop. If you're not familiar with the workshop, it's where you download mods, skins, and custom content. The weak point here is an app called Wallpaper Engine, which has almost a million reviews on Steam. The problem lies within one of its features. Wallpaper Engine lets you set an actual Windows application as your wallpaper background. So that means your wallpaper can be an executable file. So attackers do what they do best and abuse that vector. They uploaded wallpapers that look completely normal. The second you install them, the malware runs automatically. Kaspersky tested one disguised as a game called NTRHolic. It launched exactly as you would expect and nothing felt off. But in the background, it installed a back door from the DarkComet family plus a fake system file designed to hunt your Steam credentials and steal your password. But that was just one sample. They found wallpapers carrying Lumma and Vidar info stealers, crypto miners, botnet loaders, and even ransomware. We have multiple different hackers here all using this new trick. Each malicious wallpaper has already been downloaded thousands upon thousands of times. Steam has since pulled every malicious file that Kaspersky reported, but the researchers are clear here, new ones are coming. Follow for more cyber news.