Now Hacked
EN-GB
Malware

Tampered NIKKE PC launcher files spread malware

First reported · Last reported · 32 related reports

An external domain used by the GODDESS OF VICTORY: NIKKE PC launcher was hijacked on 27 September 2026, and four official CDN scripts were altered, resulting in malware being distributed to users’ PCs from 30 October. The malware could remotely control computers and steal browser credentials, cryptocurrency wallets and development tool credentials, but the actual extent of data theft has not been confirmed. Level Infinite identified the issue on 4 November, replaced the altered files, refreshed the CDN cache and reported the incident to the Korea Internet & Security Agency (KISA), while introducing automatic scanning and removal and opening a channel for reports of harm.

Key facts

Affected organisation
Level Infinite
Incident type
Malware
Occurred / detected
2026-09-27
Scale of damage
Not confirmed
Cause / method
A supply chain cyber-attack involving the hijacking of an external domain and alteration of four official CDN scripts
Location
South Korea

Timeline

  1. An external domain was hijacked and four official CDN scripts were altered.
  2. Malware distribution through the PC launcher began.
  3. The operator identified the issue, replaced the altered files, refreshed the CDN cache and reported the incident to KISA.
  4. The operator announced the introduction of automatic scanning and removal and began accepting reports of suspicious activity on external accounts and financial losses.
  5. Users reported losing data after formatting their PCs, and a compensation scheme offering in-game items drew criticism.

32 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.