NIKKE PC client compromised with malicious code, Level Infinite and Shift Up confirm and ship a fix
Hugely Popular RPG NIKKE Was Compromised, Installing Malicious Code On Players’ PCs
Publisher Level Infinite confirmed that script files in Goddess of Victory: NIKKE's PC client were tampered with, letting third parties remotely access players' PCs. According to South Korean outlet INVEN, the compromise began on September 27 when attackers injected malicious code into four JavaScript files on the servers, and from October 30 those files were used to install a remote-access agent on PCs that booted the game, potentially exposing passwords, cookies and crypto wallets. The files were removed from the server as of November 3, developer Shift Up confirmed the client was patched on November 4, and Level Infinite advises anyone who booted the game since September 27 to install the new client with a scan-and-remove feature.
The report lays out the timeline of malicious code in NIKKE's PC client and the official response, helping readers judge whether they are affected and update accordingly.
Source: Kotaku · kotaku.com