Level Infinite has added malware detection and removal to the Windows PC client for Goddess of Victory: NIKKE after attackers tampered with the game’s launcher scripts and used them to distribute malicious software. The publisher said the feature became available at 8 a.m. on November 5 (UTC+9).
Its official incident notice says the compromise affected the PC launcher, while the mobile versions were not affected. The company has not disclosed how many players may have been impacted and says it is still investigating the scope.
The publisher’s timeline says a third party hijacked the insightjs.com domain, used by some game services, on September 27. An independent analysis found that four scripts on Level Infinite’s content delivery network were altered later that day, and the publisher says malware distribution began on October 30. Level Infinite detected abnormal scripts around midnight on November 4, replaced three files between 2:04 and 2:23 a.m., and completed a cache refresh for the remaining file at 12:09 p.m. The company says the currently distributed launcher is safe following those fixes, while its review of the compromised delivery path continues.
The analysis found that the injected code could install a K2F remote-access agent capable of running commands, browsing and downloading files, capturing screenshots, and collecting game and browser credentials. A separate Windows DLL sample contained code to steal cryptocurrency wallet recovery phrases and private keys, but researchers have not established whether that component was deployed or whether players lost cryptocurrency.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
