Table of Contents
Goddess of Victory: Nikke PC Launcher Tampering Triggers Security Investigation
Players using the PC version of Shift Up‘s Goddess of Victory: Nikke have been warned about a potentially serious security incident after script files used by its official launcher were tampered with by a third party.
The game’s official account confirmed the issue on November 4, saying client fixes and an update had been implemented at approximately 2.30am KST. Level Infinite and SHIFT UP are still investigating the extent of the impact and have promised further information on follow-up measures.
The incident affects the PC launcher rather than the mobile versions currently available on iOS and Android. It arrives during a particularly active period for the shooter, which has continued growing its wider audience through collaborations such as Goddess of Victory: Nikke‘s Heartbeat Temptation crossover with Razer and other major events.
Researchers Found Modified Scripts on the Official CDN
The official notice stops short of detailing exactly what the altered files could do, but independent security research paints a considerably more concerning picture.
A technical investigation published by researcher MotherSphere identified four modified JavaScript files hosted through Level Infinite’s content delivery infrastructure. According to the analysis, attacker-controlled code had been present since September 27, with some launcher sessions potentially capable of downloading a remote-control agent from late October onwards.
BleepingComputer independently examined two of the altered scripts and found an obfuscated loader capable of retrieving additional code from external servers. The resulting malware could potentially execute commands, access files, capture screenshots and obtain information stored by browsers, including credentials and cryptocurrency wallet data. It remains unknown how many users were actually affected or whether attackers successfully extracted information from compromised systems.
Goddess of Victory: Nikke Players Can Check Logs for One Sign of Compromise
Players concerned that their system may have encountered the malicious component can inspect the launcher’s logs for one known indicator. Within the Goddess of Victory: Nikke installation folder, open: Launcher/intl_service/debug.log
Searching that file for k2f_chan can reveal whether the remote-control agent ran on the machine, according to the security analysis. However, the log can be overwritten when the launcher starts again, so not finding the string does not conclusively prove that a computer was never affected.
Anyone who finds evidence of compromise should avoid using that computer for sensitive accounts until it has been secured. Researchers recommend changing passwords and terminating active sessions from a separate clean device, running an updated security scan and taking further system-level remediation where necessary.
Players should also follow subsequent instructions from Shift Up and Level Infinite as the investigation develops.
Other Level Infinite Games Are Not Currently Confirmed as Affected
One part of the initial reports requires some caution. Because the modified files were delivered through Level Infinite infrastructure, speculation has spread that other games published by the company could also be affected.
At present, however, the public technical research specifically documents the Goddess of Victory: Nikke PC launcher, and there is no confirmed evidence that titles such as Delta Force, Honor of Kings, Arena Breakout or PUBG Mobile were compromised through the same incident.
Players therefore should not assume that every Level Infinite game is affected simply because the publisher operates shared online infrastructure. For Goddess of Victory: Nikke, the incident is an uncomfortable interruption for a game that has grown considerably beyond its original mobile audience, including increasingly elaborate crossovers such as its second Evangelion collaboration.
The immediate launcher vulnerability has received a client-side fix, but with the full scope still under investigation, affected PC players should keep an eye on official updates before assuming the incident is completely resolved.
