Games
NIKKE: PC launcher tampered with – operator explains how to check
Level Infinite confirms the tampering and releases a check tool for Windows PCs. Affected players should also secure their login credentials.
For the Windows version of Goddess of Victory: NIKKE, the operator published concrete security measures on November 5, 2026. Anyone who has launched the PC launcher at least once since September 27, 2026 at 3 p.m. Japan time should check their computer and secure their accounts. Level Infinite now confirms that launcher files were in fact manipulated by third parties.
Who may be affected
According to the new announcement, the domain insightjs.com, used by part of the service, was taken over on September 27. Attackers then altered four script files that the official launcher downloads via a content delivery network. According to the operator, distribution of the malware through these files began on October 30 at 3 a.m. Japan time.
On November 4, the team discovered the irregularity and replaced the affected files. The launcher version currently being delivered is said to be usable again. Nevertheless, systems on which the launcher previously ran may still need to be checked. According to the operator, the mobile version is not affected. How many computers were actually infected or whether data was leaked is still being investigated.
Official security check and account protection
Since November 5 at 8 a.m. Japan time, the PC client has included a function to detect and remove the malware distributed in connection with the incident. Before starting the check, all browsers, especially Chrome, should be fully closed. If suspicious software is found, the program offers to remove the relevant files and entries. Anyone who no longer has the launcher installed or does not want to start it will find a separate guide for manual checking from the operator.
In addition, the operator's team recommends changing account passwords used from another, unaffected device or only after the security check has been completed. Stored API keys and access tokens should be revoked and newly created. A full virus scan and an offline scan with Microsoft Defender are also recommended. For account irregularities or financial damage, Level Infinite refers users to its customer support.
The complete steps are described in the official security notice. Game*Spark and Denfaminicogamer also document the measures published on November 5.
Investigation continues
Security researchers had previously warned of possible remote access and the theft of login credentials. These technical risks should not be equated with confirmed data theft. According to ITmedia NEWS, Level Infinite is still examining the scope of the incident and the exact route of the manipulation. The team announces stricter monitoring, integrity checks for downloaded files and restricted launcher permissions.
NIKKE is an online game by SHIFT UP and Level Infinite. A separate live-service title is the subject of the planned discontinuation of IDOLY PRIDE; that is not a security incident.