Malicious Wallpaper Engine Downloads Target Gamers and Crypto Holders
- Kaspersky identified malicious downloads on Steam Workshop, with thousands of installs.
- The malware stole Steam credentials and deployed Lumma and Vidar infostealers.
- Infections were primarily in China and Russia, but also seen in Singapore, Hong Kong, Germany, Vietnam, India, and Canada.
- The attack used executable programs disguised as animated wallpapers featuring anime characters.
- Researchers noted the involvement of multiple threat actors rather than a single group.
Kaspersky’s discovery highlights the risk of trusted platforms being abused to distribute malware under the guise of legitimate content. The campaign targeted gamers and cryptocurrency wallet holders by using malicious animated wallpapers to steal sensitive data.
This incident adds to a series of Steam-related malware attacks affecting users globally, emphasizing the need for vigilance when downloading content from seemingly reputable sources. (Source)
