CONNECT WITH US
Gaming

Gaming

Hugely Popular RPG NIKKE Was Compromised, Installing Malicious Code On Players’ PCs

Kotaku logo

Published on

Add as a preferred source on Google
Hugely Popular RPG NIKKE Was Compromised, Installing Malicious Code On Players’ PCs

Goddess of Victory: NIKKE publisher Level Infinite is just the latest games company to acknowledge its services have been compromised in recent weeks. However, in Level Infinite’s case the attack is significantly more concerning than many of the others: the company has found that script files inside NIKKE‘s PC client have been compromised, allowing third parties to potentially access a user’s PC remotely.

As first reported by South Korean news outlet INVEN (via Automaton Media), compromises to the game’s client occurred on September 27 when hackers were able to inject malicious code inside of four JavaScript files on Level Infinite’s online servers. These were then by loaded by NIKKE’s PC launcher once the game was booted. Starting on October 30th, the compromised files were used by attackers to install a remote-access agent onto the PCs of any user who booted the game (though it was not activated on every boot or for all users).

Once installed, the PC could then be remotely accessed, giving complete access to any sensitive information or file on that user’s computer. This included, but was not limited to, passwords, cookies, and crypto wallets. These files were all removed from the server as of November 3, and as of November 4 NIKKE developer Shift Up (also known for its work on Stellar Blade) confirmed that the client had been patched.

We have identified an issue indicating that the PC Launcher's script files may have been tampered with by a third party.

Accordingly, client fixes and an update were implemented on November 4 at approximately 02:30 (UTC+9).


Source link
Related Topics:Gaming

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.