Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
19 IOCs

Dozens of malicious wallpapers found on Steam Workshop: gamers’ accounts at risk

Securelist
Securelist
Published June 16, 2026Original Report

Threat Actors

Malware Families

Excerpt

Since late 2025, malware has been spreading rapidly through the Steam Workshop, the gaming platform’s built-in service for players to create and share custom content. The attackers are primarily targeting gamers in China and Russia, aiming to hijack their accounts. To pull this off, they are exploiting Wallpaper Engine – a popular live wallpaper app available on Steam – specifically leveraging its Workshop sharing feature. The malware is hidden inside the wallpaper…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYPlayINFRASTRUCTUREhttp://202.144.192.29…http://120.48.156.17/…http://202.144.192.29CAPABILITYLummaPlayVidarVICTIMunknown
Adversary(1)
Infrastructure(6)
Capability(3)
Victim

Indicators of Compromise

Open the mindmap →

19 indicators

TypeIndicatorConfidenceScoreFirst Seen
URLhttp://202.144.192.29/audit.phpHighScore 58/100First seen
MD5fe1f6485013cd5e6d5cf718049b0b8d6MediumScore 53/100First seen
URLhttp://120.48.156.17/ey.php?ka=user1&amp;id</a></li>HighScore 58/100First seen
MD50f4f01c6d495abb37403072dd017ce8dMediumScore 53/100First seen
MD5ded08ae5df7f1b12e5fdb767dbbed0b1MediumScore 53/100First seen
MD520965254e29104986e11939decd39549MediumScore 53/100First seen
URLhttp://202.144.192.29HighScore 58/100First seen
MD595856f2ce428c728d9781d3296558068MediumScore 53/100First seen
MD5af080780cca2acd1d082ce01e7cc346aMediumScore 53/100First seen
URLhttp://120.48.156.17/ey.php.HighScore 58/100First seen
MD55620f01284329f561b1839a36be55355MediumScore 53/100First seen
MD574414ed4b63aadec039b603c32762b80MediumScore 53/100First seen
URLhttp://120.48.156.17HighScore 58/100First seen
MD5d1693bbff456ae8fa3360446706df6daMediumScore 53/100First seen
MD518dedc0009f0927cba6425c84cce9883MediumScore 53/100First seen
URLhttp://202.144.192.29/download2/Themes2.zipHighScore 58/100First seen
MD58c2cc585ad8a13a72a704c0fda0c9854MediumScore 53/100First seen
MD5b9fa763a53da3eea742d0f3c845a8c09MediumScore 53/100First seen
MD5c133c3dd9f7d6934598025047df41abfMediumScore 53/100First seen

IOC Relationship Graph

Building graph…