Steam's Trusted Wallpaper App Weaponized for Mass Account Theft

With nearly a million user reviews and 100,000 daily active users, Wallpaper Engine has become an unlikely but effective vector for mass account theft. The application wallpaper feature's ability to execute arbitrary code provides attackers with a direct path to steal credentials and install persistent malware like backdoors and crypto miners. This campaign, primarily targeting China and Russia, demonstrates the security risks inherent in community-driven content platforms when verification mechanisms prove inadequate.