Games, security software become conduits for malware as hacking threats spread

PC launcher for mobile game Goddess of Victory: Nikke hacked, used to distribute malware

Security solution cPGuard's official update system also compromised

Users may be exposed to cyberattacks without knowing it, raising urgent calls for end-to-end security

Amid an expanding wave of hacking threats worldwide, even official programs for games and security software have been exploited as channels for distributing malware, setting off alarm bells across the industry.

Attackers are embedding malicious code into normal distribution processes — such as launching a game or updating a security program. As hacking traps appear in the routines of daily digital life, concerns are growing that users may be exposed to cyberattacks without ever realizing it.

According to the gaming and security industries, the PC launcher for Goddess of Victory: Nikke, a mobile game serviced domestically and internationally by China's Tencent, was hacked and used to distribute malware.

Nikke was developed by South Korean game studio Shift UP and is distributed by Level Infinite, a Tencent subsidiary. The game has accumulated about 45 million downloads worldwide.

The malware distribution stemmed from the tampering of a JavaScript file in the content delivery network used by the Nikke PC launcher on Sept. 27 by a third party. Hackers embedded malicious code into a file required to run the game, meaning users were exposed to malware simply by launching it as usual. The game's operators believe distribution of the malicious program through the compromised script began around 3:52 a.m. on Oct. 30.

The malware was found to be capable of giving attackers remote control over a user's PC, including the ability to access files and execute commands.

Level Infinite issued a belated apology, saying it had "completed the necessary security measures and fixes for the affected PC launcher" and had "prepared in-game compensation as an apology for causing users significant concern and worry."

The game's operators have reported the breach to the Korea Internet & Security Agency, which is investigating the full extent and scale of the damage.

Security software — the very tools designed to prevent hacking — has also been exploited as a vehicle for spreading malware.

On Monday, the official update system for global security solution cPGuard was hacked. Attackers stole the access key used to distribute updates and replaced legitimate update files with malicious scripts.

The incidents have heightened a sense of crisis that even official programs are no longer safe havens, pushing the industry into emergency response mode.

The gaming sector moved quickly to limit further damage. Nexon issued a security notice instructing users to delete any folders related to the Nikke launcher from their PCs and contact its security team. Netmarble isolated PCs confirmed to have Nikke installed. NCsoft, Krafton and Smilegate are also checking their own security systems and deleting related files.

The security industry is worried that the exploitation of security programs themselves as attack vectors could undermine trust in existing security frameworks.

Particularly concerning is the difficulty of distinguishing legitimate programs from those carrying malicious code, which raises the risk of damage spreading widely. Calls are growing for urgent security reviews and stronger oversight across the entire lifecycle of software — from development and distribution to updates.

sjpark@heraldcorp.com