Springz

NIKKE PC LAUNCHER INCIDENT: PHASE 2 Loss reporting and coordinated response. Community update, Nov 5, 2026. Phase 1 (containment) is complete: clean files are back on the CDN, the launcher has been updated with an official scan, and the attacker's domain has been suspended by its registrar. Thank you to everyone who checked, shared and stayed calm. Where things stand. The publisher's Nov 4 notices announced in-game compensation and referred real losses to Customer Support. I have seen no further update since then on the scope of the incident or on how real losses will be handled. Phase 2 covers: 1. one verified evidence package for the publisher, regulators and law enforcement 2. loss reporting through the proper channels, country by country 3. a formal, documented request to the publisher on scope and real losses 4. one source of verified facts, with confirmed and reported information kept apart How the work is organised. A closed working channel is being formed with security analysts, legal and data-protection specialists, regional community leads across Asia and beyond, and press. Participation is by direct invitation, to keep the group small and the work focused. Credit stays with the author of each finding. Other players do not need to sign up for anything. If you have suffered a real loss: • report it to the in-game Customer Support • keep your evidence: logs, screenshots, dates, account alerts • if money or accounts are gone, also report to your local police or cybercrime unit • you may leave a short comment here (country, platform, type of loss) and I may follow up by DM • never share passwords, keys or ID documents. I only send DMs from this account No promises on outcomes. Updates will be published here. Guide and sources: github.com/SpringZali/nikke-…

You did the manual cleanup, and the publisher says the current launcher version is safe and now scans for leftovers itself. but just few things to keep in mind: ✅ Make sure the tbs_cache folder was deleted before you opened it ✅ If the launcher shows any scan or removal notice, follow it ✅ Change important passwords from another device and turn on 2-step verification a clean result is a good sign, not a full all-clear. If anything odd continues, contact in-game Customer Support they added that feature since their new X post guide.

ご質問ありがとうございます！PCの初期化は公式からは求められていないので、念のためだけに行う必要はありません。 代わりに次の3つを行ってください。 1️⃣ 残っているものを、公式の手動チェック手順と見比べる x.com/NIKKE_en/status/211811… 載っている項目（レジストリ、Chromeのフォルダ、tinygetファイル、tbs_cacheフォルダ）があれば、ガイドの通りに削除してください。 2️⃣ Windowsセキュリティでフルスキャン。Malwarebytesなど別のスキャナーも追加すると安心です。 3️⃣ 別のデバイスから重要なパスワード（メール、Google、Discord、銀行など）を変更し、2段階認証をオンに。 残っている痕跡が何か分からない場合は、名前を教えてください。確認します。スキャンで何も出なくても、完全な安全宣言ではありません。おかしな動きが続く場合は、ゲーム内のカスタマーサポートへ連絡してください。 ※翻訳ツールを使って書いています。読みやすいと嬉しいです。

I really doubt a reinstall would catch it. The publisher hasn’t shared what the scan covers, and you’ve already run their in-game cleanup. The registry is only one trace, the guide also lists the Chrome folder, the tinyget file and tbs_cache, so check all of them. A second opinion scan (Malwarebytes or another antivirus) is a reasonable extra, but it’s not a publisher requirement. Most useful is this: change important passwords from another device, turn on 2-step verification and check your active sessions. If anything odd continues, contact in-game Customer Support. Much love, stay strong

Yes, the MotherSphere check only reads files, so you can run it again any time, including before you open NIKKE. It’s a community tool, not official, and it’s unsigned, so Windows may warn about it. Before you open the launcher, also delete the tbs_cache folder in %APPDATA%\nikke_launcher, as the publisher’s guide says: x.com/NIKKE_en/status/211811…. I’m not sure which “mini loader” you mean. To be safe, get the installer fresh from the official NIKKE site or store instead of reusing an old file.

The publisher says the currently distributed launcher version is safe, but I can’t tell what your warning is. Could you share the exact text or a screenshot, and say whether it comes from your browser, Windows or an antivirus? Some players who reinstalled saw no warning at all, download only from the official NIKKE site or store

you’ve already done a lot of the right things. Nobody can confirm for sure that a PC is fully clean, but a Windows reset is not something the publisher asks for. I’d: (1) do the publisher’s manual check: x.com/NIKKE_en/status/211811…, (2) change other important passwords from another device and turn on 2-step verification, (3) run the official scan and removal in the PC client when you can, (4) contact in-game Customer Support if anything odd continues.

Good to hear nothing was lost. If anything funny shows up, keep the evidence and contact in-game Customer Support. Take care!

Please check the exact string “k2f_chan registered” in debug.log, not just “k2f_chan”. Then do the publisher’s manual steps even if scans found nothing: registry entry, Chrome PlatformExperienceHelper folder, tinyget file, tbs_cache folder. Change passwords from another device. A Windows reinstall isn’t something the publisher asks for, so it’s your call. If anything odd continues, contact in-game Customer Support. Guide: x.com/NIKKE_en/status/211811…

The publisher’s guide only mentions the Chrome folder, and nothing is confirmed about which other browsers were targeted, so I can’t say for sure, they should, idk why they didn't.... Finding nothing in Chrome plus clean scans is a good sign, but not a full all-clear. Since Opera GX is your real browser, I’d change important passwords from another device and log out other sessions. If anything odd continues, contact in-game Customer Support, they should work it out. Guide: x.com/NIKKE_en/status/211811…

You’ve already done what the publisher asks: the in-game cleanup, scans, registry and Chrome folder. Reinstalling isn’t needed just to check. If you want to play again, the publisher says the current launcher version is safe and it scans at launch. It’s not a full all-clear though, so if anything odd continues or you lose something, contact in-game Customer Support. Guide is here just in case you need: x.com/NIKKE_en/status/211811…

No need to apologise, your English is fine. Yes, the manual guide covers people without the launcher too: teapawt.net/NIKKE_en/status/211811… After a Windows reinstall most of the leftovers are gone. What still matters: your passwords, which you already changed (do it from another device, if you haven't), revoking any API keys or tokens you used, and an antivirus scan. If you reinstall the launcher, the updated one runs the official scan. Contact Customer Support if anything odd continues.

Not by itself. The files that matter (the registry entry, the Chrome DLL folder, tbs_cache) sit outside the NIKKE folder, so reinstalling doesn't remove them. The official scan in the updated launcher can find and remove them (it asks first), and the manual check works without it: teapawt.net/NIKKE_en/status/211811…

The initial vector was already closed: the publisher replaced the tampered CDN files on Nov 3 and 4 and updated the launcher. What the suspension adds is that the old address is dead, and the evidence is now with the registrar and host. I'll keep watching for new domains. That's why the post lists what it does and doesn't change.

yes, according to the official NIKKE notices the current launcher version is safe to use

Do you think we can work out to request a bigger compensation as a community?

We begin PHASE 2 Community Assemble on the incident, don't hesitate to do your part if interested: teapawt.net/SpringZ_FSG/status/211…

We begin PHASE 2 Community Assemble on the incident, don't hesitate to do your part if interested: teapawt.net/SpringZ_FSG/status/211…

We begin PHASE 2 Community Assemble on the incident, don't hesitate to do your part if interested: teapawt.net/SpringZ_FSG/status/211…