NIKKE PC Launcher Compromised in Supply-Chain Attack
Original title: NIKKE PC launcher compromise put players’ passwords and personal files at risk
Supply-chain attack on Level Infinite's NIKKE launcher distributed remote-control malware exposing player credentials and files.
Attackers tampered with JavaScript files on Level Infinite's CDN, distributing a remote-control agent. Opening the legitimate launcher can execute the malware which supports running programs, browsing files, downloading data, taking screenshots, retrieving NIKKE login credentials, browser passwords and cookies, and crypto wallet data. Level Infinite replaced the files on November 4 after identification by researcher MotherSphere. Mobile players are unaffected. The number of compromised PCs remains unclear.
Unconfirmed: Number of affected PCs unclear
- Malware supports running commands, screenshots, credential theft
- Evidence of agent running as early as October 23
- Fixes deployed and all files clean on November 4
- Contact Level Infinite support for suspected infections
Impact: stealing NIKKE login credentials, browser passwords, cookies and personal files
- 1.Check PC for malware traces
- 2.Secure accounts from clean device
- 3.Move crypto funds if exposed
- Vendors
- Level InfiniteMalwarebytes
- Products
- NIKKE PC launcher
- Malware
- remote-control agent
From the original article
2 min read at malwarebytes.comPlayers of Goddess of Victory: NIKKE are being urged to check their PCs after attackers tampered with files used by the game’s Windows launcher.
By @MetallicaMVP · malwarebytes.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.