NIKKE’s PC Launcher Was Serving Malware Since September

The makers of Goddess of Victory: NIKKE say someone tampered with the PC launcher’s script files. A fix went out November 4.

What’s known

• A researcher says four JavaScript files on the publisher’s CDN were changed on September 27
• The injected code pulled more code from attacker domains each time the launcher opened. BleepingComputer confirmed the loader in two files
• The payload reportedly steals credentials and crypto wallet data and gives remote access

My take

If you play NIKKE on PC, update, run a full scan, and change passwords from a different, clean machine. Move crypto to a new wallet. Game launchers are just browsers with your passwords nearby.

God Bless, and Use the Source!

References & Further Reading

• NIKKE PC game launcher hacked to spread remote access, data-stealing malware (BleepingComputer)