NIKKE PC Launcher Security Incident: What to Do

Level Infinite confirms PC launcher tampering, provides security check and account protection steps for Commanders.

Level Infinite has issued a detailed security advisory for GODDESS OF VICTORY: NIKKE after confirming that the Windows PC launcher was compromised by a third party. The incident, which involved tampered script files and the distribution of malicious programs, has prompted the developer to implement a security check feature and outline account protection measures. For ongoing coverage of the game, visit our goddess-of-victory-nikke news hub.

Incident Timeline: Key Dates and Actions

The compromise was traced to a hijacked open-source domain and unfolded over several weeks. The table below summarizes the confirmed timeline based on the official announcement.

Date & Time (UTC+9)	Event
2026-09-27 10:59	Open-source domain `insightjs.com` hijacked by a third party.
2026-09-27 15:41	Launcher script files partially tampered with via the compromised domain.
2026-10-30 03:52	Distribution of malicious programs to users' PCs began.
2026-11-04 ~00:00	Anomalies detected; investigation and response initiated.
2026-11-04 02:04–02:23	Three abnormal script files replaced (First Response).
2026-11-04 12:09	CDN cache refresh completed for remaining abnormal file; corrected file deployed (Second Response).

Who Needs to Perform a Security Check

Commanders who have launched the Windows PC launcher at least once after 2026-09-27 15:41 (UTC+9) are advised to check their PCs and accounts. The mobile version was not affected, so mobile-only players need not take action.

PC Security Check: How It Works

Starting from 2026-11-05 08:00 (UTC+9), the official PC client includes a feature to scan for and remove the malicious programs distributed in this incident.

Before launching the PC client, close all running browsers, including Chrome.
If a malicious program is detected, a pop-up will ask for permission to remove related logs, DLL files, and registry entries.
If you agree, all data associated with the detected program will be deleted.
If browsers are not fully closed, some DLL files may remain, but they will no longer be executable and pose no additional risk.
If no malicious programs are detected, the game will launch normally without additional pop-ups.

For Commanders who do not have the PC launcher installed or wish to perform a manual check, a separate guide is available: NIKKE PC Launcher Security Incident: Check Guide.

Account Protection Measures

After removing any malicious programs, Level Infinite recommends the following steps using a different, unaffected device or after completing a security check on the current PC:

Change passwords for any accounts used on the affected PC.
Revoke existing API keys or access tokens stored on the affected PC and generate new ones.

Reporting and Support

If you believe you have been affected or have suffered financial losses, contact Customer Support through the in-game center. Level Infinite states it will review each inquiry carefully and respond promptly.

Future Security Enhancements

To prevent recurrence, Level Infinite plans to:

Conduct a comprehensive review of security management for the PC launcher.
Strengthen security monitoring to detect unauthorized file modifications early.
Establish an integrity verification system for external resources accessed by the launcher.
Review and minimize permissions assigned to each launcher feature.

What This Means for Commanders

The incident is serious but contained. The fixes are in place, and the security check feature is available. PC players who launched the game after 2026-09-27 15:41 (UTC+9) should run the check and follow account protection steps. Mobile players are unaffected. For a broader overview of the incident and compensation details, see NIKKE PC Launcher Security Incident: Official Apology.