Steam Workshop abused to spread malware via Wallpaper Engine app

Kaspersky researchers found threat actors uploading malicious "application" wallpapers to Steam Workshop that execute on install via the Wallpaper Engine app, installing backdoors (DarkKomet), account-stealing components, infostealers (Lumma, Vidar), cryptominers, loaders and ransomware; dozens of malicious packages had already been downloaded thousands to tens of thousands of times and, although identified samples were removed, attackers are likely to continue exploiting this feature.