Updated:09:49 AM CET Nov,04
(new)
(c) 1998-2026 Gameguru Mania
Privacy Policy statement
|
NIKKE PC Launcher Hijacked to Install Password-Stealing Remote Agent - briefly|
| (hx) 09:43 AM CET - Nov,04 2026 | Researchers have confirmed that the PC launcher for the hit anime shooter Goddess of Victory: NIKKE was compromised through a supply-chain attack on Level Infinite’s servers.
Attackers modified four official JavaScript files on the company’s CDN on September 27, 2026, so the launcher would load malicious code from insightjs.com on every start.
From October 23 at the latest, the modified files could drop a remote-control agent able to run commands, take screenshots, and steal passwords, browser data, SSH keys, and crypto wallets.
Several players reported finding the agent running; Proton does not protect Steam Deck users. Players can check the launcher’s debug.log for the string k2f_chan to see if they were hit.
Level Infinite has replaced the tampered files and acknowledged the issue, though the method used to gain write access remains unknown. The fix does not undo data already taken from infected machines.
|
|
last 10 comments: All comments
|
|
Add your comment (free registration required)