Kaspersky: malware disguised as anime wallpapers on Steam Workshop

Security researchers at Kaspersky say malware is being distributed through animated desktop wallpapers on Steam Workshop’s Wallpaper Engine, with multiple infected packages downloaded thousands of times. Kaspersky included screenshots of several affected wallpapers, many depicting blushing anime women.

Wallpaper Engine supports application-based wallpapers that can run executable programs on a user’s Windows PC, a feature attackers have abused to hide malicious software. Kaspersky describes two delivery methods: bundling malicious executables inside wallpaper packages, and hiding malware in password-protected archives with passwords embedded in archive names or configuration files.

Once installed, the application-based wallpaper can automatically trigger the malicious payload.

kaspersky, malware, steam workshop, wallpaper engine, anime wallpapers, animated wallpapers, desktop wallpapers, executable payloads, password archives, malicious executables