Malware Attack Rocks Steam Workshop with Crypto Wallet Stealing Malware

Kaspersky has detected a widespread malware attack targeting gamers and cryptocurrency users on Steam Workshop. The malicious software, hidden in downloads labeled as Wallpaper Engine, features animated female anime characters.

The malware targets Steam credentials and installs infostealers like Lumma and Vidar, which are known for stealing sensitive data, including cryptocurrency wallet credentials. Multiple countries, including China, Russia, Singapore, and Germany, have been affected by this significant rise in malware attacks.

Kaspersky identified a sophisticated malware attack where attackers packaged the malware directly with wallpaper files or inside password-protected archives that activated after a user completed installation. Alarmingly, many of these wallpaper packages were downloaded thousands of times. Among the malicious software deployed were well-known information thieves, Lumma and Vidar.

Maxim Starodubov, a researcher at Kaspersky, highlighted the underlying risk by stating, “Trusted platforms can be abused to distribute malware.” He emphasized how attackers exploit these platforms to distribute harmful content under the guise of harmless applications.