NIKKE Windows launcher compromised through publisher's content network, putting player credentials at risk
BREACHNIKKEredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Attackers compromised JavaScript files hosted on Level Infinite's official content delivery network, which the NIKKE Windows launcher loads, in a supply-chain attack. The distributed remote-control agent could run commands, take screenshots, and collect saved game logins, browser passwords and cookies, developer secrets and cryptocurrency wallet data. Level Infinite replaced the abnormal files and refreshed the cache on 4 November, and the number of affected PCs is unclear.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Check your PC if you opened the NIKKE Windows launcher during the period identified in the reporting, and close the launcher first.
- Follow the NIKKE removal instructions published by the publisher carefully.
- Change your account passwords from a clean device rather than the possibly compromised PC.
- If a cryptocurrency wallet or its recovery phrase may have been exposed, move funds from a clean device to a newly created wallet with a new recovery phrase.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Malwarebytes Labs
Who and what is in it
Products