Level Infinite has formally apologized for a supply chain attack that pushed malware through the Goddess of Victory: NIKKE PC launcher, and it published a full incident timeline plus an automatic cleanup tool that rolled out on November 5. Anyone who launched the Windows PC client after September 27 should run a security check, while players who only use mobile do not need to act.
Quick Facts: Publisher: Level Infinite. Game: Goddess of Victory: NIKKE by SHIFT UP. Cause: third party domain insightjs.com was hijacked on September 27 and four CDN script files loaded by the PC launcher were tampered with. Malware distribution window: from October 30. Fix: compromised files replaced on November 4 and an automatic detection and removal feature added to the PC client on November 5 at 8:00 AM UTC plus 9. Mobile versions: not affected.
What happened to the NIKKE PC launcher
According to investigation findings described in reporting on the official Level Infinite apology, the incident began on September 27 at 10:59 AM when a domain used for game operations was hijacked by a third party. Between 3:41 PM and 3:42 PM that same day, four official CDN script files downloaded by the launcher were altered. Starting October 30 at 3:52 AM, those modified scripts distributed malicious programs to player PCs that launched the game through the PC client.
Level Infinite detected the anomaly around midnight on November 4. The team replaced three of the tampered files with clean copies by 2:23 AM as a first response, then completed the CDN cache refresh for the remaining file by 12:09 PM the same day. On November 5 at 8:00 AM local time, the company added an automatic detection and removal feature to the official PC client so players can clean their systems by simply running the launcher, and it also released a manual removal guide for players who prefer to check without launching the client.
In its statement, the NIKKE operations team said it should never happen that an official program run to enjoy the game could instead threaten player security. The team added that it feels deep responsibility as a publisher for failing to provide a service players can use without hesitation, and it apologized for forcing players to check for damage themselves and to worry about follow on harm.
Who is affected and what to do now
The notice asks every player who launched the Windows PC launcher at least once after 3:41 PM on September 27 to perform a security check. Players who only ever played on mobile do not need to take action, because the incident was limited to the PC launcher and the mobile version was not affected.
The easiest path is the built in security feature, which detects and removes the malware automatically when the official PC client runs. Players who uninstalled the launcher or who do not want to run it can follow the manual guide instead. The manual steps start by disconnecting the network and fully closing the game, the launcher, and the Chrome browser, including a check of the system tray for any lingering NIKKE icon. Players then open the launcher installation folder, inspect the debug.log file for a known malicious marker string, and follow the removal steps if it is present. Even when the marker is absent, the guide recommends updating antivirus software and running a full system scan, since risk cannot be ruled out completely. Some steps touch system files and the registry, so players should verify each path before deleting anything.
Compensation and reports of secondary damage
Level Infinite said it is preparing in game compensation to express its apology. It also opened a dedicated reporting channel through its official customer support center for players who suffered secondary damage linked to the breach, such as gameplay disruption, compromised external service accounts, or financial losses. Affected players should file through customer support so each case can be reviewed and processed.
To prevent a repeat, the publisher pledged structural upgrades that include a stronger real time security monitoring system, an integrity verification system for external resources loaded by the launcher, and minimum permission policies applied per launcher feature.
Why this matters for PC players
Launcher supply chain incidents are rare but serious, because players reasonably trust official game clients and often run them with broad system access. This apology follows our earlier report on the NIKKE PC launcher supply chain attack, and the long gap between the September tampering and the October start of malware distribution shows why integrity checks on every loaded resource matter, and the response here gives players a clear test in the form of a date threshold plus an automatic fix. PC players who touched the launcher inside the window should treat the check as required maintenance rather than an optional step.
How do I know if my PC was affected by the NIKKE launcher malware
If you launched the Windows PC version of Goddess of Victory: NIKKE at least once after 3:41 PM on September 27, run the automatic security check in the official PC client, which was added on November 5. If you prefer a manual check, disconnect your network, close the game and launcher completely, inspect the debug.log file in the launcher installation folder for the marker string named in the official guide, and run a full antivirus scan afterward.
Is the mobile version of NIKKE affected
No. Level Infinite confirmed the incident was limited to the PC launcher and that the mobile version was not affected, so players who only play on mobile do not need to take security measures for this incident.
Will affected NIKKE players receive compensation
Level Infinite said in game compensation is being prepared. Players who suffered secondary damage such as financial losses, compromised external accounts, or gameplay disruption can also file a report through the official customer support center for review.
What is Level Infinite doing to stop this from happening again
The publisher pledged to strengthen its real time security monitoring, to build integrity verification for external resources loaded by the launcher, and to enforce minimum permission policies for each launcher feature.
Please note that when you make a purchase through our links at GameHaunt, we might earn a small commission. This helps us keep bringing you the free journalism you love on our site! And don't worry, our editorial content remains totally unbiased. If you'd like to show some support, you can do so here.
