Cybersecurity researchers have uncovered a malware campaign that has been exploiting a popular desktop customization application on Steam to infect thousands of computers and steal user accounts since late 2025.