NIKKE players are being urged to check their Windows PCs after Level Infinite confirmed that files in the game’s official PC launcher were tampered with and used to distribute malicious programs.
In an official announcement, the publisher said an open-source domain used by some of its services was hijacked on September 27. Launcher script files were then partially modified, with the distribution of malicious programs beginning on October 30.
The issue was detected on November 4, after which Level Infinite replaced the affected files and refreshed its content delivery network. The publisher says the currently distributed version of the launcher is safe to use, but players who opened the Windows client after September 27 at 15:41 UTC+9 are being asked to perform a security check. Mobile-only players are not affected.
What NIKKE players need to check
The updated PC client includes a security feature designed to detect and remove malicious files linked to the incident. Players are advised to close the game, launcher, and all browsers before starting the check.
NIKKE’s manual instructions also tell players to inspect the launcher’s file for the phrase . If the phrase appears, the company says a malicious program may have executed on the PC.
Players are also advised to update their antivirus software, run a full system scan and perform a Windows Security Offline Scan. Level Infinite recommends changing passwords for accounts used on the affected PC, as well as revoking API keys and access tokens. Those steps should be completed from a different device or after the PC has been secured.
The full extent of the incident remains unclear. However, BleepingComputer reported that the malware included a remote-access agent capable of running commands, browsing and downloading files, capturing screenshots and collecting browser data. Analysis also found functionality linked to cryptocurrency wallet information, although it has not been confirmed whether attackers stole cryptocurrency from players.
Players criticize compensation
Alongside the security instructions, Level Infinite issued in-game compensation to Commanders. The package shown in player screenshots includes 3,000 Gems, 10 Advanced Recruit Vouchers, seven 24-hour Growth Sets, 20 Custom Modules and 100 Ultra-Double Boost Modules.
The reward quickly drew criticism on X, with player Lilac writing: “This is the compensation for literal malware btw.”
Level Infinite said it plans to review its security management practices, strengthen monitoring for unauthorized file changes and introduce additional integrity checks for resources accessed by the launcher.
I’m Abhishek Sharma, an author at TigerJek.com. I enjoy exploring games, testing different strategies, and turning what I learn into clear, useful guides. My goal is to help players understand the game better and improve without the usual confusion.
