NIKKE PC game launcher hacked to spread remote access, data-stealing malware

Summary

Hackers have compromised the PC launcher for the game Goddess of Victory: NIKKE through a supply-chain attack. The attackers tampered with the launcher scripts to distribute malware designed to steal user credentials and cryptocurrency wallet data.

IFF Assessment

FOE

This incident involves a supply-chain attack that distributes malware to steal sensitive user information, posing a direct threat to defenders.

Defender Context

This supply-chain attack highlights the risks associated with trusting third-party software components, even seemingly benign ones like game launchers. Defenders should be aware of the potential for similar attacks targeting software distribution channels and emphasize the importance of robust endpoint security and user education regarding credential and cryptocurrency wallet security.

Read Full Story →