The short version: The makers of the game “Goddess of Victory: NIKKE” say some files in its computer launcher may have been changed by an outsider. If anyone in your home opened that launcher since late October, stop using it for now. Then change your important passwords from a different device you trust.
What is this, and why does it matter?
“Goddess of Victory: NIKKE” is a popular game for phones and computers. On a computer, you open it through a small program called a launcher.
On 4 November 2026, the game’s makers (developer SHIFT UP and publisher Level Infinite, part of Tencent) said an outsider may have changed some of the launcher’s files. They released a fix at about 2:30 a.m. Korea time on 4 November. In its English notice, the company said it is “currently investigating the scope of the impact” and will share more in a separate notice.
Korea’s national news agency, Yonhap, reported an independent researcher’s findings, and the researcher published a detailed write-up. The changed files could quietly install remote-control software. This software lets a criminal use the computer from far away and read passwords saved in web browsers. It can also read sign-in “cookies” (small files that keep you logged in) and crypto wallets (apps that store digital money).
Reports say this could have happened to people who opened the PC launcher from about late October. Not every launch was affected.
What we do not know yet
- How many computers were infected.
- Whether any accounts were actually taken over.
- Whether the phone version of the game is affected. Reports so far only describe the PC launcher.
Do this today (about 10 minutes)
- Stop using the PC launcher until the company says it is safe.
- Then, from a trusted device (such as your phone), change your email password. Anyone who controls your email can reset your other accounts.
- Add a passkey or authenticator app to your email. A passkey lets you sign in with your fingerprint, face or screen lock. An authenticator app is a phone app that shows a short sign-in code. Both are safer than text-message codes.
- Sign out of all devices in your email and your other important accounts. This stops anyone from using stolen sign-in cookies.
- Change the passwords saved in that PC’s browser. Start with banking, shopping, and Discord or game accounts.
Not sure the computer is safe now? Ask someone you trust to help, or have it checked or reset.
See also: The first hour after a hack
Sources
- Inside Games (Japan), 4 Nov 2026 (SHIFT UP and Level Infinite say launcher script files may have been altered by a third party; fix around 02:30 on 4 Nov; scope under investigation): https://www.inside-games.jp/article/2026/11/04/190338.html
- ThisIsGame (Korea), 4 Nov 2026 (official notice on NIKKE social channels, 12:13 Korea time; three of four altered files replaced): https://www.thisisgame.com/articles/432018
- Yonhap News (Korea), 4 Nov 2026 (remote-control software could steal saved passwords, sign-in tokens and crypto wallet data; Level Infinite “checking internally”): https://www.yna.co.kr/view/AKR20261104049300017
- GODDESS OF VICTORY: NIKKE (@NIKKE_en) on X, 4 Nov 2026, «Notice Regarding PC Launcher Anomaly»: https://x.com/NIKKE_en/status/2117817602659770434
- Inven Global (English), 3-4 Nov 2026: https://www.invenglobal.com/articles/28099/nikke-pc-launcher-reportedly-hit-by-supply-chain-attack-no-statement-yet-from-level-infinite
- Inven Global (English), follow-up, 4 Nov 2026 (timeline): https://www.invenglobal.com/articles/28112/goddess-of-victory-nikke-pc-launcher-allegedly-compromised
- Independent researcher’s write-up (technical analysis, timeline and checks): https://gist.github.com/MotherSphere/d6c049a09ba8ac3085c51ee9df24a4e5
Checked: 4 Nov 2026, 12:10 Paris time. This alert will change if SHIFT UP or Level Infinite publishes more. Our disclosure: SafeinAI has no affiliate links and earns nothing from the sites or tools named on this page. If this ever changes we will say so here, on this page.
Leave a Reply