Hardware Ready Ready to Bench?
Passwords and personal files for Goddess of Victory: NIKKE players could be at risk following the detection of malicious code in the PC launcher.
MotherSphere, an independent company specializing in cybersecurity research, identified the presence of malicious code within four JavaScript files hosted on Level Infinite’s official Content Delivery Network (CDN). This means that players of the PC version of Goddess of Victory: NIKKE could potentially be exposed to security risks regarding their data.
Goddess of Victory: NIKKE: why it matters
According to the analysis conducted, starting from September 27, 2026, four official JavaScript files present on Level Infinite’s CDN were compromised. These files are loaded by the NIKKE PC launcher and, according to findings, as early as October 23, opening the launcher could have led to the surreptitious installation of a remote control agent on the user’s computer.
This malicious agent, distributed via the NIKKE launcher, would have granted an attacker the ability to execute arbitrary commands on the compromised system, read any file present, and capture screenshots. Specifically, the agent was capable of:
- Executing programs and system commands
- Browsing hard drive folders and downloading files
- Capturing screen screenshots
- Retrieving locally saved NIKKE login credentials
- Gathering passwords and cookies stored in the web browser
- Searching for developer credentials, API tokens, and other potentially sensitive secrets
- Collecting data related to the cryptocurrency wallet extension installed on the system
Level Infinite has communicated that players who use exclusively mobile devices to play are not affected by this vulnerability and do not need to take any specific action. However, it was ascertained that some files of the NIKKE PC launcher for Windows were actually tampered with by third parties, potentially allowing the execution of malicious code upon application startup.
Consequently, PCs and player account information may have been exposed to security risks. Level Infinite stated it is carefully evaluating the extent of potential damages and examining appropriate corrective measures, conducting a thorough analysis of its network security environment, including the CDN, in order to determine how the PC startup files were compromised. The company assured that it will adopt all necessary precautions to prevent further damage and ensure this issue does not recur.
What changes and what are the effects
Cybersecurity experts at Malwarebytes advise users who play Goddess of Victory: NIKKE via the Windows launcher to immediately close the application and subject their PCs to a full scan. It is also advisable to carefully follow the removal instructions published by NIKKE and protect their accounts from a device considered secure.
Level Infinite invites players who believe they have been affected by the compromise, including those experiencing issues with external accounts or financial losses, to contact the customer support team to provide details about the incident and retain pertinent documentation, avoiding sharing sensitive personal information.
Source and further reading on Goddess of Victory: NIKKE: original article.
* Content created with the assistance of artificial intelligence systems.