Shift Up CEO Kim Hyung-tae has apologized for the recent malware distribution and file tampering issue surrounding the 'Goddess of Victory: Nikke' PC launcher.
This issue came to light following user reports and a technical report published by an independent security researcher on GitHub on the 3rd. According to the report, on September 27, commands designed to call external malicious programs were secretly implanted into four files on publisher Level Infinite's official Content Delivery Network (CDN) servers, raising concerns that starting October 24 at the latest, running the PC launcher could have installed and executed remote-access malware on PCs.
The malware is designed to execute external commands, steal files, take screenshots, and target passwords stored in browsers, 'Nikke' account credentials, 28 types of cryptocurrency wallets, developer SSH keys, and cloud access credentials while the launcher is running. In Windows PC environments, it can register itself with the Chrome browser to continue running even after the launcher is closed, and Linux and Steam Deck environments utilizing compatibility software (Proton) were also analyzed to be exposed to the same risks.
In response, the team behind 'Goddess of Victory: Nikke' announced on the 4th via their official lounge and social media, "We have confirmed an abnormal phenomenon where script files in the PC launcher may have been tampered with by a third party," noting that a client fix and update were deployed at around 2:30 AM on the 4th. They added that they are currently assessing the scope of impact caused by the issue and will announce follow-up measures in a separate update.
Shift Up CEO Kim Hyung-tae also personally posted an apology on his X account on the 4th. CEO Kim explained, "A problem related to the PC launcher has occurred," adding, "In cooperation with Level Infinite, we are mobilizing all our resources to find a fundamental solution to this matter, and we are also preparing follow-up measures." He further stated, "We sincerely apologize for causing deep concern and damage to all Commanders. We will endeavor to share the follow-up measures as quickly as possible."
