Now Hacked
EN
Malware

Altered NIKKE PC launcher files spread malware

First reported · Last reported · 32 related reports

An external domain used by the GODDESS OF VICTORY: NIKKE PC launcher was hijacked on September 27, 2026, and four official CDN scripts were modified, leading to malware being distributed to users’ PCs from October 30. The malware could remotely control computers and steal browser credentials, cryptocurrency wallets, and development tool credentials, but the actual extent of data theft has not been confirmed. Level Infinite detected the issue on November 4, replaced the modified files, refreshed the CDN cache, and reported the incident to the Korea Internet & Security Agency (KISA), while deploying automatic scanning and removal and opening a channel for reports of harm.

Key facts

Affected organization
Level Infinite
Incident type
Malware
Occurred / detected
2026-09-27
Scale of damage
Not confirmed
Cause / method
A supply chain attack involving the hijacking of an external domain and modification of four official CDN scripts
Location
South Korea

Timeline

  1. An external domain was hijacked and four official CDN scripts were modified.
  2. Malware distribution through the PC launcher began.
  3. The operator detected the issue, replaced the modified files, refreshed the CDN cache, and reported the incident to KISA.
  4. The operator announced the deployment of automatic scanning and removal and began accepting reports of suspicious activity on external accounts and financial losses.
  5. Users reported losing data after formatting their PCs, and a compensation plan offering in-game items drew criticism.

32 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.