WordPress malware campaign hides payloads in Steam profiles