Anime Girls Could Steal Your Crypto as Wallpaper Malware Targets Steam Gamers
Kaspersky reported that attackers abused Steam Workshop to spread malicious Wallpaper Engine downloads disguised as animated desktop wallpapers, often featuring anime characters. Because Wallpaper Engine can run executable content, the wallpapers could install malware on Windows systems while appearing legitimate. Dozens of infected packages were found, some with thousands of downloads. The campaign delivered infostealers such as Lumma and Vidar, plus the RenEngine loader, and in some cases hid payloads in password-protected archives. One 2025 example used a wallpaper to secretly install the DarkKomet backdoor while pretending to launch a game. Infections were mainly seen in China and Russia, with additional victims in several other countries. Kaspersky said the activity likely involved multiple threat actors. The findings add to a broader pattern of malware distribution through Steam games and related ecosystem abuse.
