NIKKE: Goddess of Victory's official PC launcher was loading tampered code for more than five weeks, and in its final days that code installed a remote-access agent on players' PCs. Here's what is known so far and what you should do.
On November 3, 2026, players found that the PC client for NIKKE: Goddess of Victory had been delivering malware through its own launcher. Level Infinite is Tencent's publishing label and NIKKE's publisher. It says a third party hijacked a domain used by some game services on the morning of September 27, 2026. That afternoon, four official script files that the launcher downloads from Level Infinite's content delivery network (CDN) were tampered with. Level Infinite says malware started reaching players' PCs through those scripts on October 30.
From then until the files were cleaned on November 4, simply opening the PC client, even once, may have installed a remote-control agent on the player's machine. Community researchers have suggested the agent may have been served earlier than October 30. Level Infinite asks everyone who opened the launcher after September 27 to check their PC.
The alarm came from a player, not from the publisher. At about 9:15 PM KST...
