Russians warned about the danger of a Steam app - hackers attack through desktop wallpaper files

PC gamers risk getting not only stylish wallpapers but also additional surprises in Wallpaper Engine.

Recently, "Gazeta.Ru" reported on a discovery by specialists from "Kaspersky Lab". They drew attention to a scheme for stealing Steam accounts using one of the popular applications distributed through Valve's service.

Attackers use Wallpaper Engine — this tool allows PC gamers to install "live" desktop wallpapers. Community members can share their creations through the "Steam Workshop":

Reportedly, gamers from Russia, as well as China, Singapore, Hong Kong, Germany, Vietnam, India, and Canada, are falling victim to these attacks.

According to experts, "some malicious wallpaper packs have been downloaded tens of thousands of times" since at least late last year.

Specialists stated that attackers used two main methods to infect victims' devices:

• Malicious executable files, DLL libraries, and scripts were embedded in the wallpaper package and then automatically launched after installation
• Malware was hidden in a password-protected archive, and the password was contained in the archive's name or configuration files

Representatives of "Kaspersky Lab" said that one of the discovered virus samples "worked outwardly without suspicion," but in reality, it installed the DarkKomet backdoor for remote access to the computer and a modified library for attacking Steam accounts. Attackers could collect Steam account data and intercept active user sessions.

Cybersecurity specialists recommend being careful when downloading applications even from reliable sources, paying attention to the authors of files and their reputation, and using protective solutions for their devices.