Players who opened the Windows launcher for Goddess of Victory: NIKKE may have received malicious software through files hosted by the game’s own service. The publisher has repaired the launcher, but affected households still need to scan their PCs and protect passwords that may have been exposed.
What happened
Attackers altered resources used by NIKKE’s legitimate Windows launcher, according to Malwarebytes Labs. This was a supply-chain attack: Players did not have to install a fake game or suspicious add-on. Simply opening software they already trusted could have allowed malicious software to run.
An independent researcher identified malicious code in four JavaScript files stored on Level Infinite’s official content delivery network. The delivered software provided remote-control capabilities and could have put passwords and personal files at risk. The number of infected computers and the full amount of stolen data have not been disclosed.
The exact exposure period is also uncertain. Level Infinite said distribution of the malicious program began October 30, while the researcher found signs that the remote-control software was operating as early as October 23.
Level Infinite replaced three abnormal files early on November 4 and refreshed the delivery network’s cache for the fourth later that day. The researcher subsequently found clean copies on all four servers checked. The publisher also released fixes and added malware checking to the official PC client. These repairs stop the known delivery route, but they do not remove malware already installed or restore information that attackers may have taken.
Who is affected
The warning applies to people who opened the official NIKKE launcher on a Windows PC during the possible exposure period. Because the reported timelines differ, players who used the launcher on or after October 23 should take precautions.
Level Infinite said people who played only on mobile devices are not affected and do not need to take additional steps for this incident. No list of affected Windows versions or an infection count has been disclosed.
What to do now
Update the official NIKKE PC client. Open the legitimate Windows launcher and allow it to install all available fixes before playing again. Do not download a replacement launcher from an unofficial website or link.
Run the client’s new malware check. Level Infinite added malware detection to the official PC client. Use that feature after updating, even if the computer appears to be working normally.
Run a full security scan. Open Windows Security or another trusted antivirus program, install its latest security definitions, and choose a full scan rather than a quick scan. Quarantine anything it detects.
Change important passwords from a clean device. Start with email, Microsoft or Google accounts, financial services, gaming accounts, and any password manager used on the PC. Give every account a different password so one stolen credential cannot unlock several services.
Watch sensitive accounts for unfamiliar activity. Review recent sign-ins, password-change notices, purchases, and messages sent from your accounts. If anything looks wrong, change that account’s password immediately and use its recovery or support process.
Keep monitoring the publisher’s official notices. The total number of affected PCs and the extent of possible data theft remain unknown, so additional findings or instructions may follow.
Sources
- NIKKE PC launcher compromise put players’ passwords and personal files at risk — Malwarebytes Labs
Written by the CyberSec24 news desk with AI assistance, from the sources above. Spot an error? Tell us and we'll correct it.