Malware Found in 'NIKKE' Game, Risk of Theft of 28 Types of Cryptocurrency Wallets

Malware capable of stealing cryptocurrency wallet information has been discovered in the PC launcher of the game 'Goddess of Victory: NIKKE'. The attackers are believed to be able to collect data from 28 types of digital asset wallet extension programs, including MetaMask and Phantom. According to a technical report posted on GitHub on the 4th, four JavaScript files in Level Infinite's Content Delivery Network (CDN) were tampered with on September 27. These files contained code that loads malware from the attacker's server. The report indicates that remote control malware was executed on some users' computers who ran the PC launcher starting October 23. The malware includes a 'wallet_files' command that collects digital asset wallet information, allowing it to retrieve data from various digital asset wallets. The attackers can execute arbitrary programs or download files from the user's computer through remote control commands. Additionally, passwords, cookies, authentication tokens, and SSH keys stored in major browsers are also targets for theft. The malware is designed to remain active even after the launcher is closed. The report's authors recommend that users do not run the PC launcher until Level Infinite officially confirms the resolution of the issue. Infected users should change their passwords on a secure device and transfer funds from their digital asset wallets to a new wallet generated with a new seed phrase.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.