Shift Up CEO Kim Hyung-tae has apologized for the malware distribution and file tampering issue that recently surfaced regarding the 'Goddess of Victory: Nikke' PC launcher.
The issue came to light through user reports and a technical report published on GitHub by an independent security researcher on the 3rd. According to the report, commands designed to fetch external malware were secretly embedded into four files on publisher Level Infinite's official Content Delivery Network (CDN) servers on September 27, and concerns were raised that running the PC launcher starting as early as October 24 may have installed and executed remote-control malware on users' PCs.
The malware is structured to execute external commands, steal files, and take screenshots while the launcher is running, while targeting browser-saved passwords, 'Nikke' account information, 28 types of cryptocurrency wallets, developer SSH security keys, and cloud access credentials. In particular, on Windows PCs, it can register itself to the Chrome browser to continue running even after the launcher is closed, and environments such as Linux and Steam Deck using compatibility software (Proton) were also analyzed to be exposed to the same risk.
In response, the 'Goddess of Victory: Nikke' team stated on the 4th via its official lounge and social media, "We have confirmed an anomaly where script files in the PC launcher may have been modified by a third party," announcing that a client fix and update were carried out around 2:30 AM on the 4th. They added that they are currently confirming the scope of impact caused by the issue, and that follow-up measures will be announced separately.
Shift Up CEO Kim Hyung-tae also posted an apology directly on his X account on the 4th. CEO Kim Hyung-tae explained, "A problem related to the PC launcher has currently occurred," adding, "We are working in cooperation with Level Infinite and mobilizing all our resources to find a fundamental solution to this issue, while also preparing follow-up measures." He further stated, "We are truly sorry for causing great distress and harm to all of our Commanders. We will do our best to inform you of follow-up measures as quickly as possible."
