Tag: renengine

2 Attack Reports | 0 Vulnerabilities

Attack reports

Gamers beware: malicious wallpapers on Steam found stealing accounts

Since late 2025, cybercriminals have been exploiting Wallpaper Engine, a popular live wallpaper application on Steam, to distribute malware through Steam Workshop. Attackers target primarily Chinese and Russian gamers by embedding malicious code within application wallpapers shared on the platform.…
infostealer
credential theft
vidar
lumma
account hijacking
crypto miner
renengine
2026-06-16
darkkomet
gaming platform
steam workshop
wallpaper engine
Published: June 16, 2026
Downloadable IOCs: 8

The game is over: when “free” comes at too high a price. What we know about RenEngine

A widespread campaign is distributing the RenEngine loader malware disguised as pirated games and software. The loader uses a modified Ren'Py game engine to deliver payloads like Lumma and ACR stealers. It employs sophisticated techniques including sandbox evasion, process injection, and modular de…
loader
stealer
vidar
hijackloader
lumma
acr stealer
process injection
2026-02-11
pirated games
ren'py
renengine
Published: February 11, 2026
Downloadable IOCs: 0
Click here to see more Attack Reports