A security breach affected NIKKE’s PC launcher, potentially exposing sensitive player data and giving attackers remote access to compromised computers.

Players of Goddess of Victory: NIKKE are being urged to check their computers after publisher Level Infinite confirmed a security breach involving the game's PC client.

The incident is particularly concerning because hackers managed to inject malicious code into files hosted on Level Infinite's online servers. When players launched the game, the compromised files could potentially install malware capable of giving attackers remote access to their computers.

The security incident reportedly began on September 27, when hackers gained access to Level Infinite's servers and injected malicious code into four JavaScript files. These files were subsequently loaded by the game's PC launcher whenever players started NIKKE.

Beginning October 30, attackers used the compromised files to distribute a remote-access agent to players' computers. However, the malware was not activated during every game launch, meaning not all players who opened the client were necessarily affected.

Once installed, the malicious software could give attackers extensive access to a victim's computer. This potentially included sensitive information such as passwords, browser cookies, personal files, and cryptocurrency wallets.

Level Infinite confirmed that the compromised files were removed from its servers by November 3. On November 4, developer Shift Up also confirmed that the PC client had received a security patch to address the issue.

In response to the breach, Level Infinite confirmed that it is continuing to investigate how attackers managed to compromise its network security. The company also acknowledged that players' computers and account information may have been exposed.

Anyone who launched the game after September 27 is advised to download and install the updated PC client. The new version includes a security scanning feature designed to detect and remove malicious programs distributed through the compromised files.

Level Infinite also recommends closing all web browsers before running the scan. This helps ensure that potentially compromised files can be identified properly.

Players who believe they have suffered financial or other losses because of exposed personal information are encouraged to contact customer support for assistance.

The incident adds to a growing number of cybersecurity concerns affecting the gaming industry in recent weeks. With player accounts, personal information, and gaming platforms increasingly connected, security breaches like this highlight the importance of protecting both game services and the computers used to access them.