Steam Workshop Malware Campaign Uses Wallpaper Engine to Steal Accounts and Infect Gamers

A coordinated malware campaign abuses Steam Workshop Wallpaper Engine "application" wallpapers to distribute trojanized packages that execute arbitrary code, deploy backdoors (e.g., DarkKomet), infostealers (e.g., Vidar, Lumma), crypto miners and ransomware, hijack Steam sessions to exfiltrate authentication tokens and use compromised accounts to push further malicious content; the report includes MD5 hashes, C2 URLs and mitigation recommendations.