Science & Tech · Cybersecurity · 1 hr ago
NIKKE PC launcher files linked to malware, prompting security warnings
Security researchers found malicious code in files used by NIKKE’s PC launcher, the game published by Level Infinite.
They said three JavaScript files on the publisher’s content delivery network were altered, with the changes believed to date to September 27.
Launching the game could install a remote-access program without players downloading anything from another site.
The program could access files, run commands and capture screens, and was designed to seek saved passwords and other credentials.
There is no confirmation that personal or financial data was stolen, or that any cryptocurrency assets were taken.
Some affected files were replaced, but altered versions may have remained on some servers or in players’ computer caches, so users were advised to avoid the PC launcher until an official safety confirmation.
Recently exposed players were advised to change passwords from a safe device and end existing login sessions; for confirmed infections, disconnecting the computer and reinstalling the operating system may be needed.
Level Infinite is investigating the incident, while concerns about its other games remain unconfirmed and no infections in them have been reported.
Malicious code was found in three JavaScript files linked to the Goddess of Victory: NIKKE PC launcher, according to security researcher MotherSphere.
The files were reportedly altered on September 27, and malicious software may have reached some users’ computers by November 1.
The software could allow remote access to computers and target stored passwords, browser data and cryptocurrency wallet information.
Level Infinite replaced some affected files, but altered files reportedly remained on some content delivery network servers and in users’ cached files.
The scale of any impact and whether information was actually stolen remain unknown, and no infections in other games have been confirmed.
- Who
- NIKKE PC launcher users may have been exposed; MotherSphere reported the altered files. Level Infinite operates the content delivery network.
- What
- Three launcher-related JavaScript files were reportedly altered to deliver remote-access malware.
- When
- The files were reportedly altered on September 27; the malware may have reached users by November 1. The issue was reported on November 3 and 4.
- Where
- The files were on Level Infinite’s content delivery network and affected users’ PCs.
- Why
- The sources do not state why the files were altered or who was responsible.
This story does not have two clearly opposing sides.
The three JavaScript files were reportedly altered.
Malicious software had reportedly reached some users’ computers.
MotherSphere published an analysis, and users began sharing information and reporting the issue.
Reports described some files as replaced, while altered versions reportedly remained on some CDN servers.
- Affected game
- Goddess of Victory: NIKKE PC version
- Altered files
- Three JavaScript files
- Content delivery network
- Operated by Level Infinite
- Potential malware capabilities
- Remote commands, access to files and screen capture
- Confirmed infections in other games
- None reported
- Data theft and impact
- No confirmed scale of impact or information theft
3 sources
What people are saying
We are currently checking the matter with the publisher, Level Infinite.