くずもち

NIKKE PC launcher incident: the attacker's domain is DOWN. Real good news, and a win for all of us. 🎉 ✅ What's done • The registrar (PublicDomainRegistry) suspended insightjs[.]com, the attacker's domain. I checked it myself in registry and DNS data: a hold since Nov 5, 02:05 GMT, the name servers were swapped, and the name no longer resolves. • The registrar confirmed by email that it reviewed my abuse report and suspended the domain, about five hours after I sent it. The email is in the picture, cropped. • The host (1984 ehf) says it shut down the server I reported. 🟢 What it means • The address the infected scripts loaded the malware from is gone. In theory, the old attack now has no known address left to load from or send data to. • That helps everyone who hasn't launched the PC launcher yet: the publisher says the current version is safe, and now the attacker's known address is dead too. I'm not telling anyone to rush, so follow the publisher's guidance first. • It does not clean a PC that already ran the infected launcher. If that's you, use the official manual check: teapawt.net/NIKKE_en/status/211811… ➡️ What to expect next • A hold can be lifted, and the attacker can try a new domain or server. The same kind of report works again, and I'll keep watching. • Not everything is closed yet: I'm still waiting on the host about the rest. • Law enforcement is a possible next step. I'll ask the registrar and the host to keep their records for investigators. To the NIKKE team (@NIKKE_en): what I just did, you should have done yourselves from the very start. It was easy: one clear report, about five hours. It only takes speed, and every hour counts for players. Please keep moving fast: report the rest of the infrastructure, tell us if the police are involved, and keep players informed. Thank you for the official scan and guide. Thank you all for the shares, the evidence and the calm. 🙏 Guide with checks, steps and sources: github.com/SpringZali/nikke-… Follow me and star the repo to get updates.