{"id":4746,"date":"2026-11-04T09:58:42","date_gmt":"2026-11-04T08:58:42","guid":{"rendered":"https:\/\/news.goranked.gg\/en\/news\/?p=4746"},"modified":"2026-11-04T09:58:43","modified_gmt":"2026-11-04T08:58:43","slug":"nikke-pc-launcher-malware-could-steal-passwords-crypto-keys","status":"publish","type":"post","link":"https:\/\/goranked.gg\/en\/news\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys\/","title":{"rendered":"NIKKE PC Launcher Delivered Malware That Could Steal Keys"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">The PC launcher for <a href=\"https:\/\/goranked.gg\/en\/news\/nikke-coin-rush-showdown-adds-ssrs-guilty-sin\/\" rel=\"follow\">Goddess of Victory: NIKKE<\/a>, developed by Shift Up and Level Infinite, downloaded modified JavaScript files from Level Infinite\u2019s official content delivery network. The files had been altered by at least Sept. 27 and were downloaded whenever the launcher started, although the malicious code did not run on every launch. How attackers accessed the CDN remains unknown.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The remote-control agent was operating by Nov. 1. Some players reported possible infections as early as Oct. 24.<\/p>\n\n\n\n        <blockquote class=\"twitter-tweet\">\n            <a href=\"https:\/\/twitter.com\/user\/status\/2117778439516082325\" rel=\"nofollow\" target=\"_blank\"><\/a>\n            <noscript>\n                <a href=\"https:\/\/twitter.com\/user\/status\/2117778439516082325\" target=\"_blank\"rel=\"noopener nofollow\">\n                    View this tweet on Twitter\n                <\/a>\n            <\/noscript>\n        <\/blockquote>\n        <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n    \n\n\n\n<p class=\"wp-block-paragraph\">While the launcher was open, the malware could execute commands, read and upload files, and capture screenshots from all connected monitors. It searched for browser-stored passwords, Windows Credential Manager data, SSH keys, cloud and artificial-intelligence service tokens, and information from 28 browser-based cryptocurrency wallets.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">On Windows systems using Chrome, the malware could remain active after the NIKKE launcher closed. Linux and Steam Deck users who played through Proton may also have been exposed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Level Infinite replaced the altered files on its CDN on Nov. 3, although some servers may have continued distributing infected copies for a period of time. The server used by the malware stopped responding later that day. A related domain was later registered by another person, who posted a warning on the site.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Players can check whether the malicious code ran by opening Launcher\/intl_service\/debug.log in the game\u2019s installation folder. The entry k2f_chan indicates that the code was executed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Until Level Infinite confirms that the issue has been resolved, users have been advised not to open the launcher and to clear its cache. People whose computers may have been infected should change their passwords from a separate, clean device, enable two-factor authentication and end active sessions. Cloud and service tokens and SSH keys should be revoked and replaced. Cryptocurrency should be transferred to a new wallet.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The incident occurred during celebrations of NIKKE\u2019s fourth anniversary. Shift Up and Level Infinite had not publicly commented on the incident as of Nov. 4. No similar problems had been reported for the mobile versions, although their security had not been separately confirmed.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Goddess of Victory: NIKKE PC launcher downloaded altered JavaScript from Level Infinite\u2019s CDN, exposing players to malware that could access passwords, tokens, SSH keys and 28 crypto wallets.<\/p>\n","protected":false},"author":12,"featured_media":4749,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_canonical":"","_yoast_wpseo_opengraph-title":"","_yoast_wpseo_opengraph-description":"","_yoast_wpseo_twitter-title":"","_yoast_wpseo_twitter-description":"","footnotes":""},"categories":[12],"tags":[],"class_list":["post-4746","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-latest"],"newsroom_tags":[],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>NIKKE PC Launcher Malware Could Steal Passwords and Crypto Keys<\/title>\n<meta name=\"description\" content=\"The NIKKE PC launcher downloaded malware that could steal passwords, tokens, SSH keys and data from 28 crypto wallets through altered JavaScript.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/news.goranked.gg\/en\/news\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NIKKE PC Launcher Malware Could Steal Passwords and Crypto Keys\" \/>\n<meta property=\"og:description\" content=\"The NIKKE PC launcher downloaded malware that could steal passwords, tokens, SSH keys and data from 28 crypto wallets through altered JavaScript.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/news.goranked.gg\/en\/news\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys\/\" \/>\n<meta property=\"og:site_name\" content=\"Goranked\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-04T08:58:42+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-04T08:58:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/news.goranked.gg\/en\/news\/wp-content\/uploads\/2026\/11\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys.jpg?v=1793782610\" \/>\n\t<meta property=\"og:image:width\" content=\"1672\" \/>\n\t<meta property=\"og:image:height\" content=\"941\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Liam Carter\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Liam Carter\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"NIKKE PC Launcher Malware Could Steal Passwords and Crypto Keys","description":"The NIKKE PC launcher downloaded malware that could steal passwords, tokens, SSH keys and data from 28 crypto wallets through altered JavaScript.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/news.goranked.gg\/en\/news\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys\/","og_locale":"en_US","og_type":"article","og_title":"NIKKE PC Launcher Malware Could Steal Passwords and Crypto Keys","og_description":"The NIKKE PC launcher downloaded malware that could steal passwords, tokens, SSH keys and data from 28 crypto wallets through altered JavaScript.","og_url":"https:\/\/news.goranked.gg\/en\/news\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys\/","og_site_name":"Goranked","article_published_time":"2026-11-04T08:58:42+00:00","article_modified_time":"2026-11-04T08:58:43+00:00","og_image":[{"width":1672,"height":941,"url":"https:\/\/news.goranked.gg\/en\/news\/wp-content\/uploads\/2026\/11\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys.jpg?v=1793782610","type":"image\/jpeg"}],"author":"Liam Carter","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Liam Carter","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/news.goranked.gg\/en\/news\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys\/#article","isPartOf":{"@id":"https:\/\/news.goranked.gg\/en\/news\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys\/"},"author":{"name":"Liam Carter","@id":"https:\/\/news.goranked.gg\/en\/news\/#\/schema\/person\/ca881d52a76376aa50a027991737b407"},"headline":"NIKKE PC Launcher Delivered Malware That Could Steal Keys","datePublished":"2026-11-04T08:58:42+00:00","dateModified":"2026-11-04T08:58:43+00:00","mainEntityOfPage":{"@id":"https:\/\/news.goranked.gg\/en\/news\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys\/"},"wordCount":355,"commentCount":0,"image":{"@id":"https:\/\/news.goranked.gg\/en\/news\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys\/#primaryimage"},"thumbnailUrl":"https:\/\/goranked.gg\/en\/news\/wp-content\/uploads\/2026\/11\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys.jpg?v=1793782610","articleSection":["Latest Gaming News"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/news.goranked.gg\/en\/news\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/news.goranked.gg\/en\/news\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys\/","url":"https:\/\/news.goranked.gg\/en\/news\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys\/","name":"NIKKE PC Launcher Malware Could Steal Passwords and Crypto Keys","isPartOf":{"@id":"https:\/\/news.goranked.gg\/en\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/news.goranked.gg\/en\/news\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys\/#primaryimage"},"image":{"@id":"https:\/\/news.goranked.gg\/en\/news\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys\/#primaryimage"},"thumbnailUrl":"https:\/\/goranked.gg\/en\/news\/wp-content\/uploads\/2026\/11\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys.jpg?v=1793782610","datePublished":"2026-11-04T08:58:42+00:00","dateModified":"2026-11-04T08:58:43+00:00","author":{"@id":"https:\/\/news.goranked.gg\/en\/news\/#\/schema\/person\/ca881d52a76376aa50a027991737b407"},"description":"The NIKKE PC launcher downloaded malware that could steal passwords, tokens, SSH keys and data from 28 crypto wallets through altered JavaScript.","breadcrumb":{"@id":"https:\/\/news.goranked.gg\/en\/news\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/news.goranked.gg\/en\/news\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/news.goranked.gg\/en\/news\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys\/#primaryimage","url":"https:\/\/goranked.gg\/en\/news\/wp-content\/uploads\/2026\/11\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys.jpg?v=1793782610","contentUrl":"https:\/\/goranked.gg\/en\/news\/wp-content\/uploads\/2026\/11\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys.jpg?v=1793782610","width":1672,"height":941},{"@type":"BreadcrumbList","@id":"https:\/\/news.goranked.gg\/en\/news\/nikke-pc-launcher-malware-could-steal-passwords-crypto-keys\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/news.goranked.gg\/en\/news\/"},{"@type":"ListItem","position":2,"name":"NIKKE PC Launcher Delivered Malware That Could Steal Keys"}]},{"@type":"WebSite","@id":"https:\/\/news.goranked.gg\/en\/news\/#website","url":"https:\/\/news.goranked.gg\/en\/news\/","name":"Goranked","description":"Read the latest gaming news, mobile games coverage, esports news, Roblox news, Brawl Stars content, Dota 2 news, CS2 news, League of Legends, Valorant and more.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/news.goranked.gg\/en\/news\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/news.goranked.gg\/en\/news\/#\/schema\/person\/ca881d52a76376aa50a027991737b407","name":"Liam Carter","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/d8536196ca793803bf2237fb23beea3a5c7e7f68adbfdd28d8e38b6a2367b66f?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d8536196ca793803bf2237fb23beea3a5c7e7f68adbfdd28d8e38b6a2367b66f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d8536196ca793803bf2237fb23beea3a5c7e7f68adbfdd28d8e38b6a2367b66f?s=96&d=mm&r=g","caption":"Liam Carter"},"description":"Liam Carter covers RPGs, console games and open-world titles for Goranked, including GTA, Fortnite, Minecraft and The Witcher. His articles follow releases, updates and crossovers, as well as racing, fighting and football games. His coverage also includes Nintendo, PlayStation and Xbox developments.","sameAs":["https:\/\/www.instagram.com\/goranked.gg"],"url":"https:\/\/goranked.gg\/en\/news\/author\/liam-carter\/"}]}},"_links":{"self":[{"href":"https:\/\/goranked.gg\/en\/news\/wp-json\/wp\/v2\/posts\/4746","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/goranked.gg\/en\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/goranked.gg\/en\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/goranked.gg\/en\/news\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/goranked.gg\/en\/news\/wp-json\/wp\/v2\/comments?post=4746"}],"version-history":[{"count":1,"href":"https:\/\/goranked.gg\/en\/news\/wp-json\/wp\/v2\/posts\/4746\/revisions"}],"predecessor-version":[{"id":4750,"href":"https:\/\/goranked.gg\/en\/news\/wp-json\/wp\/v2\/posts\/4746\/revisions\/4750"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/goranked.gg\/en\/news\/wp-json\/wp\/v2\/media\/4749"}],"wp:attachment":[{"href":"https:\/\/goranked.gg\/en\/news\/wp-json\/wp\/v2\/media?parent=4746"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/goranked.gg\/en\/news\/wp-json\/wp\/v2\/categories?post=4746"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/goranked.gg\/en\/news\/wp-json\/wp\/v2\/tags?post=4746"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}