Springz

[Springz @SpringZ_FSG]

Update on the NIKKE PC launcher incident, with one new thing for affected players: a 3-minute form.

New here? In early November the PC launcher was tampered with, and the publisher confirmed it. We keep a free community guide that puts the official steps first.

What's new:

→ Tell us what it cost you. A short form, no passwords, logs or files. Only totals are published. We use the numbers to ask the publisher how real losses will be handled.
https://t.co/o6RCONG1cf

→ We wrote to Level Infinite's data protection officer with the registrar's and the host's case numbers and three questions from players. Customer Support answered the same report with a standard text.

→ The two researchers now work together as Colony Labs. They say 10 findings about the launcher went to the publisher, with details due on Dec 8.

→ A researcher says the common tbs_cache antivirus alerts are false alarms. This is unofficial, the publisher has not commented.

If you were affected: do the official check, protect your accounts, report real losses to NIKKE Customer Support in the game, and keep your records.

Guide: https://t.co/fMpxAYI2T4

[Springz @SpringZ_FSG]

Correct, we are separate from the two of you: an independent player project, not part of Colony Labs. I offered to cooperate on a few specific things, and we have not worked together. The guide says so in its first note.

Your 23 corrections are in. 17 we verified ourselves and applied. The other 6 rest on players' reports, so they went in as marked notes. The details are in our reply on the issue, and guide v3.8.1 is out.

For players: we retired our own check script. If an older copy of it told you NOT FOUND, please check again with the official scan or the manual steps. Your NIKKE Launcher Check is linked in the guide too.

https://t.co/fMpxAYI2T4

[Springz @SpringZ_FSG]

@Mother_Sphere @necromancer3302 Thank you, and thanks for putting it all in one place! Your report is what we built on, so we checked our own PCs with it and reported the attacker’s server.

We’ll bring any further questions to GitHub or Discord, as you suggested.

[Springz @SpringZ_FSG]

A message from me and @necromancer3302 about the NIKKE PC launcher incident. 10 minutes, with subtitles.

New here? In early November the PC launcher was tampered with, and the publisher confirmed it. Since then we have kept a free community guide that puts the official steps first.

Why we do this:
We are players too, and this hit us too. Our goal is simple: every affected player gets clear steps, gets heard, and gets a fair outcome for real losses, not only in-game items. It is early, and not all of this work is visible yet. This video is us explaining it in our own voices.

In the video:
0:00 who we are and what we did
2:27 what Necromancer found on his own PC
6:23 where we stand: we don't hate anyone, and we'd rather work together with players, researchers and creators
8:19 thanks to MotherSphere and whyKusanagi, and what you can do

Our ask to Level Infinite and SHIFT UP: please pursue the attacker through law enforcement, and tell players that you are doing it.

If you were affected: do the official check, protect your accounts, report real losses to NIKKE Customer Support in the game, and keep your records.

One voice is easy to ignore. Many calm voices are not. If you agree, a repost helps more players find the steps.

The other people on our team have asked to stay anonymous for now.

Guide: https://t.co/fMpxAYHv3w

[Springz @SpringZ_FSG]

On your earlier questions about the team and the volunteers:

The core is two people, me and Necromancer. I do the writing and the contact with the companies, he does the technical checks.

Volunteers help with public text only: translating, proofreading, and checking facts and dates against official sources. Everything goes through me before it is posted, with the source next to it.

Screening: we keep it simple by not handing anyone anything sensitive. Nobody gets player data, logs or account access, and nobody speaks for the group. We never ask players for passwords or files either.

It is a small community effort, not a company. If something we post looks wrong, tell me and I will fix it.

[Springz @SpringZ_FSG]

Fair questions, and sorry for the wait. The video is out now, link below.

Technical analysis of what: Necromancer read through MotherSphere's checker before running it, found the infection trace in the logs of his own PC, checked whether those logs had been tampered with, and traced the attacker's link to a server in Iceland. We reported it to the host and to the domain registrar, and the server and the domain were both taken offline.

The video is 10 minutes with subtitles: who we are, what he found on his PC, where we stand, and what we ask the publisher to do. He is also making his own longer video about the technical side.

https://t.co/XIZrsItQu7

[Springz @SpringZ_FSG]

A message from me and @necromancer3302 about the NIKKE PC launcher incident. 10 minutes, with subtitles.

New here? In early November the PC launcher was tampered with, and the publisher confirmed it. Since then we have kept a free community guide that puts the official steps first.

Why we do this:
We are players too, and this hit us too. Our goal is simple: every affected player gets clear steps, gets heard, and gets a fair outcome for real losses, not only in-game items. It is early, and not all of this work is visible yet. This video is us explaining it in our own voices.

In the video:
0:00 who we are and what we did
2:27 what Necromancer found on his own PC
6:23 where we stand: we don't hate anyone, and we'd rather work together with players, researchers and creators
8:19 thanks to MotherSphere and whyKusanagi, and what you can do

Our ask to Level Infinite and SHIFT UP: please pursue the attacker through law enforcement, and tell players that you are doing it.

If you were affected: do the official check, protect your accounts, report real losses to NIKKE Customer Support in the game, and keep your records.

One voice is easy to ignore. Many calm voices are not. If you agree, a repost helps more players find the steps.

The other people on our team have asked to stay anonymous for now.

Guide: https://t.co/fMpxAYHv3w

[Springz @SpringZ_FSG]

Good checks. Since your log shows k2f, a few official steps are still left:
• delete the tbs_cache folder in %APPDATA%\nikke_launcher (and the 205,135-byte tinyget log, if there is one)
• run a Microsoft Defender Offline scan too
• change your passwords from another device, and reissue any API keys or tokens

On the pop-up: the publisher says no pop-up within about 2 minutes means its check found nothing. Keep a copy of debug.log as a record, and if you see anything odd on your accounts, tell the in-game Customer Support.

[Springz @SpringZ_FSG]

NIKKE PC launcher incident: update, Nov 10

New here? This is a free community guide that puts the publisher's official steps first and labels what is official, checked, or only reported.

New from the publisher (official)
• An additional notice is out. It says the official PC launcher has resumed normal service.
(https://t.co/ymWrAMlP0J)
• The check pop-up in the PC client now shows in your system language. Close your browsers first. The check takes about 30 seconds to 2 minutes.
• A security update is planned for Nov 12 (UTC+9).
• Customer Service is reviewing each report and working on response plans.
• The publisher warns: don't run unofficial "recovery tools" or files from unverified sources.

Also (unofficial)
• Two independent researchers (@whyKusanagi and @Mother_Sphere) say the launcher still has unresolved security problems. They reported them privately and the details are not public. The notice doesn't mention this, so we don't know yet if the Nov 12 update covers it.

Our checks
• The official launcher files are still clean, and the attacker's domain insightjs[.]com is still suspended.
• No public reports of stolen data being misused so far. That's absence of reports, not proof.

What to do
• If you ran the PC launcher after Sep 27 and haven't checked yet: do the official check, run a full scan, change passwords from another device, turn on 2FA.
• If you lost something or notice anything unusual, contact NIKKE Customer Support and keep dated notes.

Guide (v3.6):
https://t.co/MvfjNokMmR

[GODDESS OF VICTORY: NIKKE - 4th Anniversary @NIKKE_en]

【PC Launcher Security Incident Additional Notice & Security Precautions】

Security measures for the PC Launcher were completed on November 4 at 12:09 (UTC+9), and the further distribution of malware related to this incident via the launcher has been blocked.

We take the considerable anxiety this incident has caused regarding the use of the PC Launcher very seriously. We sincerely apologize once again to all Commanders for the anxiety and concern this incident has caused. Please be assured that the official PC Launcher has resumed normal service.

However, if you used the PC Launcher prior to the implementation of these security measures, there is a possibility that malware remains on your PC.

We kindly ask all Commanders who have not yet taken the necessary steps to proceed with the security check according to the instructions below.

In this notice, we will re-explain how to perform the security check and remove the malware, as well as share our upcoming plans for security enhancements and key precautions.

For more details, please visit our official website: https://t.co/R89aX2nnlU

If you encounter issues during the security check or malware removal process, or if you notice any unusual activity after completing the measures, please contact our official Customer Service Center.

We are continuously reviewing reports submitted through our official Customer Service Center regarding anomalies during the recovery process, account issues, and inconveniences or burdens caused by this security incident.

Each submitted case is being thoroughly examined, and we are working on necessary response plans and actions based on our findings.

We feel a deep sense of responsibility for the issues caused by this incident and will continue to take all necessary follow-up actions to provide an environment where Commanders can play with peace of mind.

Once again, we sincerely apologize for causing immense concern and anxiety, as well as for the burden and inconvenience caused during the security check and recovery process.

GODDESS OF VICTORY: NIKKE Team

#NIKKE

[Springz @SpringZ_FSG]

@ReReReDive @BarryBe34719888 @NIKKE_en Step 1) buy 8oz pie in walmart and step 2) use microwave

Also im bad with american measurements

[Springz @SpringZ_FSG]

@Nu_scapi20251 @okizemeee @NIKKE_en You still ignoring my messages i sent you btw

[Springz @SpringZ_FSG]

I’m keeping things nice and formal to stay productive and help everyone out, which works well for me. If you’ve got a different style that’s working for you, keep it up. I’m just sticking to being friendly since it gets results, you know? But if you have other ideas, just send me a message and I’ll take a look.

[Springz @SpringZ_FSG]

@necromancer3302 @armoregg1 @Mother_Sphere at least the western ones

[Springz @SpringZ_FSG]

@necromancer3302 @armoregg1 @Mother_Sphere Also we're mostly all friends and not fan of twitter using so dont expect most of us be on social medias.

[Springz @SpringZ_FSG]

Do you want me to explain now, or shoukd I send you video a bit later today, me and my team are working on video announcement which will be ready in couple of hours? Like, I personally don't really think it would be okay if I'd assume what they're going to do, but maybe the video would help out explain things how i and the other people are working together? You tell me boss :D

[Springz @SpringZ_FSG]

Ok i will tale you informaly, i glaze them because i am taking a role of a good nice gentelan guy, who study politics, who learned that being negative and agressive will give me no results. I am doing formal tasks, i am getting my results. If you have any questions or you want any proof just dm me, i really dont understand what you want from me. all i want is to act nice and official because im getting good results on my proejct and investigation, and i motivate people to UNIONIZE, so together we can get NIKKE team to do action, what else should i do? If you have any reccomendations, tell me, you guys keep critizing but dont give advice whatsover. DM me, call me, lets have a conversation, im annoyed that you think i stand on my case, i do not, if you talk it out with me, im gonna do what you want, literally, im a simple guy.

[Springz @SpringZ_FSG]

@Nu_scapi20251 @Mother_Sphere @nu_scapi202 you should dm me or have a call, im really confused on whats going on, but i would really love if we had a nice chat, if you will convince me in wrong i will take measures, but if i will convince you, i mean... thats gonna be cool ig?

[Springz @SpringZ_FSG]

@Nu_scapi20251 @Mother_Sphere You ragebaiting literally

[Springz @SpringZ_FSG]

@Nu_scapi20251 @Mother_Sphere Proof?

[Springz @SpringZ_FSG]

@armoregg1 @Mother_Sphere Also i wasnt alone when i started posting on the incident, my colleagues just didnt want to be part of social media