A couple of weeks ago, security researchers revealed that attackers had been abusing Wallpaper Engine’s Steam Workshop to spread malware through a feature called Application Wallpapers. Unlike regular animated wallpapers, these backgrounds could run executable (.exe) files directly on a user’s PC, allowing attackers to hide malicious software inside the upload.

Following the security concerns, Wallpaper Engine Team has now announced a major change. The developers have confirmed that Application Wallpapers will be permanently removed from the public Steam Workshop, marking the end of a feature that has been part of the software since its early days. The team says the removal will only affect a small number of users.

No more Application wallpapers on Wallpaper Engine

According to the developers, the change only affects a very small portion of the Workshop. Application wallpapers account for around 0.5% of all wallpapers, and even fewer users actually use them because they have always been hidden by default and required users to manually enable them.

To prepare for the transition, most existing Application wallpapers are being switched to friends-only while they are removed from the Workshop. Users who still rely on these wallpapers have about one week to back them up locally before they disappear from public distribution.

The developers explained that Application Wallpapers were originally introduced years ago to give advanced users more freedom. At the time, the idea was to let people create highly customized desktop experiences by running external programs as wallpapers. However, Wallpaper Engine has evolved significantly since then, and most of the same effects can now be created using the app’s built-in tools without relying on executable files.

The recent malware incident also played a major role in the decision. Since Application Wallpapers are essentially normal Windows programs, they have full access to a computer once launched. While this allowed for some creative projects, it also made it possible for attackers to distribute malware through the Workshop.

The developers said that there is no reliable automated way to guarantee that executable files are completely safe. Even wallpapers that appear harmless today could become dangerous in the future if the creator’s Steam account were ever compromised and used to upload a malicious update.

Because of that risk, Wallpaper Engine decided that removing the feature entirely was the safest long-term solution. The developers also noted that the recent malware campaign affected only a very small number of users, thanks to existing safeguards, such as hiding Application Wallpapers by default and requiring multiple warning prompts before they could be installed. Even so, they believe removing the feature is the best way to ensure users can continue using Wallpaper Engine without worrying about potential security risks in the future.

About the Author

Abdul Haddi

Abdul is a tech writer and Editor for PC Guide, specializing in all things tech, gaming, and hardware.