Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
19 IOCs
Dozens of malicious wallpapers found on Steam Workshop: gamers’ accounts at risk
Threat Actors
Malware Families
Excerpt
Since late 2025, malware has been spreading rapidly through the Steam Workshop, the gaming platform’s built-in service for players to create and share custom content. The attackers are primarily targeting gamers in China and Russia, aiming to hijack their accounts. To pull this off, they are exploiting Wallpaper Engine – a popular live wallpaper app available on Steam – specifically leveraging its Workshop sharing feature. The malware is hidden inside the wallpaper…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(6)
Capability(3)
Victim
Indicators of Compromise
Open the mindmap →19 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | http://202.144.192.29/audit.php | High | Score 58/100 | First seen |
| MD5 | fe1f6485013cd5e6d5cf718049b0b8d6 | Medium | Score 53/100 | First seen |
| URL | http://120.48.156.17/ey.php?ka=user1&id</a></li> | High | Score 58/100 | First seen |
| MD5 | 0f4f01c6d495abb37403072dd017ce8d | Medium | Score 53/100 | First seen |
| MD5 | ded08ae5df7f1b12e5fdb767dbbed0b1 | Medium | Score 53/100 | First seen |
| MD5 | 20965254e29104986e11939decd39549 | Medium | Score 53/100 | First seen |
| URL | http://202.144.192.29 | High | Score 58/100 | First seen |
| MD5 | 95856f2ce428c728d9781d3296558068 | Medium | Score 53/100 | First seen |
| MD5 | af080780cca2acd1d082ce01e7cc346a | Medium | Score 53/100 | First seen |
| URL | http://120.48.156.17/ey.php. | High | Score 58/100 | First seen |
| MD5 | 5620f01284329f561b1839a36be55355 | Medium | Score 53/100 | First seen |
| MD5 | 74414ed4b63aadec039b603c32762b80 | Medium | Score 53/100 | First seen |
| URL | http://120.48.156.17 | High | Score 58/100 | First seen |
| MD5 | d1693bbff456ae8fa3360446706df6da | Medium | Score 53/100 | First seen |
| MD5 | 18dedc0009f0927cba6425c84cce9883 | Medium | Score 53/100 | First seen |
| URL | http://202.144.192.29/download2/Themes2.zip | High | Score 58/100 | First seen |
| MD5 | 8c2cc585ad8a13a72a704c0fda0c9854 | Medium | Score 53/100 | First seen |
| MD5 | b9fa763a53da3eea742d0f3c845a8c09 | Medium | Score 53/100 | First seen |
| MD5 | c133c3dd9f7d6934598025047df41abf | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…