Skip to content
NIKKE PC Launcher Compromised by Supply-Chain Attack

NIKKE PC Launcher Compromised by Supply-Chain Attack

First seen 4 Nov 2026, 03:18 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 4, 2026 at 03:18 UTC
  • •Malicious code was injected into NIKKE's PC launcher via Level Infinite's CDN.
  • •The attack allows remote access to infected machines, compromising sensitive data.
  • •Players are advised to avoid using the launcher and secure their accounts immediately.

The PC launcher for Goddess of Victory: NIKKE was reportedly compromised in a supply-chain attack, allowing attackers to install a remote-access tool on players' computers. Analysis indicates that malicious code was added to three official JavaScript files on Level Infinite's CDN starting September 27, 2026. From November 1, users opening the launcher could inadvertently download and execute a remote-control agent. This agent could execute commands, access files, and capture sensitive information such as browser passwords and cryptocurrency wallet data. Level Infinite has not yet issued a public statement regarding the incident. Players are advised to refrain from using the launcher until a fix is confirmed and to take steps to secure their accounts. The attack appears to have been active for several weeks, with modified files still being served as late as November 3. The situation is ongoing, with players sharing their experiences on various forums.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 2h ago How this analysis works

Timeline

2026-09-27
Malicious code added to CDN files
Attacker code was inserted into three JavaScript files on Level Infinite's CDN, affecting the NIKKE PC launcher.
Invenglobal
2026-11-01
Remote-control agent deployable
Users opening the NIKKE PC launcher could download and run a remote-control agent, exposing their systems to potential compromise.
Invenglobal
2026-11-03
Modified files replaced
Level Infinite replaced three of the compromised files on November 3, but some modified versions were still being served.
gist.github.com

More articles in this cluster (2)

Extracted Entities (5)

1 / 3

Common questions

How do I know if I'm affected?
Check the debug.log file in the NIKKE installation folder for signs of the remote-control agent.
What should I do if I used the launcher?
Avoid using the launcher until a fix is confirmed, and change passwords from a secure device.
Is there a patch available?
As of now, Level Infinite has not confirmed a fix for the vulnerability.