Steam Wallpaper - Targeted Steam Memory/File Access

Ibrahim Saud@tektrix

•updated Jun 19, 2026•0•0•1

This rule detects suspicious activity where a malicious DLL (AggregatorHost.dll) is injected into a process that then explicitly interacts with 'steam.exe' by accessing its files. This behavior is indicative of malware targeting Steam users, potentially to steal credentials or items.