The page says four official scripts on Level Infinite's CDN were modified from Sep 27, and that opening the NIKKE PC launcher could install a remote-control agent from Oct 24 at the latest.
Status: Three files were replaced on Nov 3, but FeedList.feb647c9.js was still modified on two CDN servers at 20:23 GMT.
Capabilities: While the launcher was open, the attacker could run commands, read files and take screenshots.
Advice: Don't open the launcher until Level Infinite confirms the fix, and clear its cache first.
Linux and Steam Deck: Proton doesn't protect you, because Wine maps your home folder and the agent can read it.
Sign in to comment.
TL;DR of the article, generated automatically.
The page says four official scripts on Level Infinite's CDN were modified from Sep 27, and that opening the NIKKE PC launcher could install a remote-control agent from Oct 24 at the latest.