Summary
Malicious Steam Workshop uploads used hidden scripts that execute malware after being downloaded.
Attack exploited users’ trust in Steam Workshop, not a flaw in Steam or Wallpaper Engine.
Check creator profiles and comments, avoid outside downloads, and keep antivirus on.
Downloading a new wallpaper can be a great way to breathe some new life into your desktop, and apps like Wallpaper Engine make the process incredibly simple. Tack on the added convenience of being able to install user-created content from the Steam Workshop, and it’s easy to see why Wallpaper Engine has become so popular. However, a recently discovered malware campaign points to a much darker side of the online user content pool. One where choosing to download and trust the wrong file from places like the Steam Workshop could lead to you losing your entire Steam account, or worse.
Related
How I Recovered My Hacked Steam Account: 5 Steps
Recovering a hacked Steam account is possible—it just takes a few steps.
Bad actors turned free desktop wallpapers into a malware trap
A minefield waiting for you to walk into it
Credit: Kapersky
According to a post from researchers with Kapersky, bad actors were found to have uploaded a variety of malware-ridden files disguised as legitimate additions to the Steam Workshop for Wallpaper Engine since late 2025. If you used the app and happened to click on one of the affected wallpapers, then you could unknowingly install malware to your system, as they were designed to execute immediately after downloading.
What is most notable to understand here is that this attack did not involve a security flaw in Steam or even Wallpaper Engine, which remains one of the best PC customization apps on Steam. Instead, the bad actors relied on something much simpler to fool: your trust in the platform.
Over the years, the Steam Workshop has become a haven for modders and creators to share their content with the rest of the world. I can’t even recall the number of mods that I’ve downloaded from the Workshop across all the games I’ve played, and it’s likely that many others out there feel the same. Because it’s all connected to Steam, it’s really easy to fall into the trap of thinking that all of that content is safe.
However, that is not the case. When digging deeper into the situation, the security researchers found that the malicious upload used scripts designed to retrieve and execute additional files. This allowed the attackers to deliver malware to affected systems while hiding behind what appeared to be a normal wallpaper download.
Think twice before downloading user-generated content
Blind trust will only bring trouble
Screenshots by Yadullah Abidi | No attribution required.
While this incident specifically involved Wallpaper Engine, the broader lesson applies to almost any platform out there that relies on user-generated content. Mods, wallpapers, custom maps, skins, and other community creations often come from people you’ve never met and know very little about.
This doesn’t mean you should stop using Steam Workshop or avoid community-created content altogether. However, it’s worth taking a few simple precautions before downloading anything. Checking a creator’s profile, reading recent comments, and avoiding content that asks you to download files from outside Steam can all be useful ways to help reduce your risk.
Related
I refuse to pay for Wallpaper Engine when this open-source alternative exists
The one free wallpaper app that beats all the others.
It’s also a good idea to keep Windows Security or another trusted antivirus solution enabled on your system, just so you can keep an eye on any unusual behavior that might pop up.