[Oni]

Goddess of Victory: Nikke's PC launcher was recently compromised in a supply-chain level attack. This can lead to credential stealing and RAT-centric function in terms of malware. Several Hololive streamers were recently sponsored and this has had an adverse affect on the trust of ShiftUp.

---

If you have recently played or used the PC client, I highly advise you read the Gist and focus on eliminating the threat.

Among the notable threats, the pushed updates have the ability to:

• Steal accounts/credentials
  
• Access files and run commands
  
• Steal crypto
  
• Maintain access

To find out if you are affected quickly:

• Do not run the Nikke client if you have not ran it recently.
  
• Check Launcher/intl_service/debug.log for entries mentioning k2f_chan. If you see this, you are likely infected.
  
• If you believe you are affected or updated/used the launcher during the affected period, I highly recommend you perform a clean Windows install and change all credentials.

---

Here's a Github Gist, with information:
https://gist.github.com/MotherSphere/d6c...e9df24a4e5

[Oni]

A video about the situation if you hate reading:


Not the most technical description, but apt enough.