The " Goddess of Victory: NIKKE " operations team announced that some files in the Windows PC launcher had been tampered with by a third party, creating the possibility that malicious software could be executed when the launcher was launched.
They are urging users who launched the Windows PC launcher even once after 3:41 PM on Sunday, September 27, 2026, to verify their security and take the necessary measures.
Security Incident Occurs with "Goddess of Victory: NIKKE" PC Launcher; Affected Users Urged to Check Their Systems
It has been discovered that certain files in the Windows version of the “Goddess of Victory: NIKKE” PC launcher were tampered with by a third party.
If the tampered launcher was launched, there is a possibility that malicious software was executed on the PC.
This affects users who launched the Windows PC launcher at least once on or after Sunday, September 27, 2026, at 3:41 PM.
Since this incident occurred exclusively with the PC launcher and does not affect the mobile version, users who only use the mobile version do not need to perform a security check.
Guidance on Security Checks via the Official PC Client for Affected Users
The operations team has informed affected users that they can perform a security check and take necessary measures through the security feature (ACE) built into the official PC client.
They are urging users to review the instructions for manually verifying the PC launcher’s security, available on the official website, and take the necessary steps.
Additionally, manual verification instructions have been released for users who do not currently have the PC launcher installed or who wish to verify their system without using the launcher.
Since this process involves deleting registry entries and files, users are urged to be careful not to delete anything other than the paths and items specified in the manual security verification guide for the PC launcher posted on the official website.
Malicious software may have been distributed since October 30
According to an official announcement from the operations team, this launcher security incident unfolded as follows:
- September 27, 2026 (Sun) at 10:59 AM: The “insightjs.com” domain, used by a portion of the game service, was maliciously hijacked by a third party
- September 27, 2026 (Sun), 3:41 PM – 3:42 PM: Four official CDN script files downloaded by the launcher were tampered with. Malicious code connecting to a specific domain was inserted into the tampered files.
- October 30, 2026 (Fri) 3:52 a.m.: Distribution of malicious software to users’ PCs began via these scripts
- Around 12:00 AM, Wednesday, November 4, 2026: An anomaly in the launcher’s script files was detected, and an investigation and response were initiated
- Wednesday, November 4, 2026, 02:04–02:23: Replaced three malicious script files, blocking further distribution of malicious programs via those files (Initial Response)
- Wednesday, November 4, 2026, 12:09: Completed updating the CDN cache related to the remaining malicious script file. Subsequently, the correct files were progressively deployed to the relevant CDN nodes (Second Response)
The operations team plans to continue investigating the scope of the incident while strengthening monitoring systems and establishing mechanisms to verify the security of external files.
Users are advised to contact customer support if they experience any issues related to game play or suffer secondary financial losses.
The latest procedures regarding security checks and responses are posted on the official "Goddess of Victory: NIKKE" website.