Anime-Themed Malware Targets Steam Users, Threatens Crypto Security

Kaspersky Warns of Anime-Themed Malware Targeting Steam Users

Kaspersky has uncovered a new wave of malware that exploits Steam Workshop, specifically through malicious downloads of the Wallpaper Engine, which have been disguised as animated desktop backgrounds featuring anime characters.

This malware not only compromises Steam accounts but also hijacks active sessions and introduces additional threats, such as Lumma and Vidar infostealers, which are notorious for extracting sensitive information like credentials and cryptocurrency wallet details. The firm noted that this ongoing issue seems to involve multiple threat actors rather than a single group.

According to Kaspersky, many of the wallpaper packages have been downloaded thousands of times, particularly affecting users in China and Russia, while also impacting individuals in Singapore, Hong Kong, Germany, Vietnam, India, and Canada. The malware is often bundled directly with the wallpapers or hidden within password-protected files that are extracted after installation.

Maxim Starodubov, a researcher at Kaspersky, commented on the situation, stating, "Trusted platforms can be exploited to disseminate malware: These attacks depend on users trusting content hosted within legitimate ecosystems." This highlights the vulnerability of seemingly benign content that can lead to significant security breaches.

The report follows previous incidents of malware linked to Steam, including a case from July 2025, where a compromised Early Access title was used to spread various malware types, including those targeting cryptocurrency wallets. Additionally, the FBI has been investigating malware distribution across several Steam games earlier this year.