Players of Goddess of Victory: NIKKE are being urged to check their PCs after attackers tampered with files used by the game’s Windows launcher. Opening the launcher could allow malicious software to run, potentially exposing much more than a player’s game account. The incident occurred as part of a supply-chain attack, where services or software used by the company in question is compromised.
NIKKE PC launcher compromise put players’ passwords and personal files at risk
About this summary. This is a short excerpt from the description that Malwarebytes Labs published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.malwarebytes.com/blog/news/2026/11/nikke-pc-launcher-compromise-put-players-passwords-and-personal-files-at-risk
Source attribution: headline and facts are from Malwarebytes Labs (malwarebytes.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Auditing the auditor: Unmasking Apex Accelerator
Elastic Security Labs identified a malicious npm package, @apexacc/cli, which led us to an operation posing as a Web3 accelerator. That operation had spent months…
CERT-UA: Fake Cloudflare Checks Deliver LunexStealer Malware
Over 100 hacked websites used fake Cloudflare checks to trick visitors into installing LunexStealer through ClickFix commands. The lure is the now-familiar ClickFix…
Russian APT29 Targets Mobile Users with Watering Hole Attacks
Russia-linked group APT29 targeted iOS and Android users through hijacked websites and a compromised analytics service. Sekoia says a large-scale watering hole campaign…
NIKKE PC game launcher hacked to spread remote access, data-stealing malware
The developers of Goddess of Victory: NIKKE have confirmed that hackers tampered with the game's PC launcher scripts in a supply-chain attack, distributing malware…
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites…
Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
Attack chain overviewAttack chain Host reconnaissance collection SSH authorization and tunnel identities Protocol Tunneling (T1572): reverse SSH forwarding…