Dear Phoxhunters,
First and foremost, we would like to express our deepest apologies for the cybersecurity incident that occurred yesterday. Following the resolution of these temporary issues, we have conducted a full review and summary of the event. We are providing the following timeline of the March 18 incident for your reference:
17:04 (UTC+8): A hotfix was deployed to resolve known online issues.
17:24 (UTC+8): Received feedback regarding login failures on Global servers; the development team began investigating the cause.
17:28 (UTC+8): Received feedback regarding login failures on the CN server, along with reports of malicious files being automatically downloaded onto PCs.
17:40 (UTC+8): Identified the root cause; began repair work and a wider-range security audit.
18:20 (UTC+8): Login services restored for PC and mobile on the CN server.
18:24 (UTC+8): Login services restored for PC and mobile on Global servers.
18:28 (UTC+8): Received user feedback that malicious files still remained on PCs and inquiries regarding account security.
19:38 (UTC+8): Emergency update deployed to remove the malicious files via the update process.
The root cause of this incident was a malicious attack originating from a specific region, targeting our internal office systems and live servers. Even after the initial breach, persistent attempts to continue the attack and spread misinformation have occurred. We strongly condemn these actions. As security is a vital pillar of a live product, this incident has served as a serious wake-up call for our team.
We sincerely apologize for not providing a full response on the day of the incident. We wanted to ensure a complete review of the problem and finalize our security measures before providing a detailed explanation to the community.
To better defend against future malicious attacks, the development team has implemented the following security enhancements:
1. Real-time Monitoring & Tampering Alerts: We have deployed a real-time monitoring and tampering alert system for core file systems. Any unauthorized access or attempted modification of game resources will trigger an immediate alert, ensuring we can detect and block abnormal behavior instantly.
2. Minimized Network and Access Control: We have conducted a thorough audit and restriction of all ports and paths used for external access to sensitive files. Following the "Principle of Least Privilege," we have closed all non-essential access channels to fundamentally improve file confidentiality and storage security.
3. Hardening of Sensitive File Ports: All external access ports have been strictly consolidated. By adhering to rigorous cybersecurity protocols, we have closed non-essential communication ports and access paths to build a more robust defensive perimeter for core files and sensitive assets.
4. Server-Wide Compensation
a. Compensation: Commission Manual: Volume III*5, Prismatic Hourglass*10
b. Distribution Time: March 19, 2026, 18:00 (UTC+8)
c. Eligibility: Unlock the [Mail] function. The mail is valid for collection until March 26, 2026, 23:59 (UTC+8).
The development team sincerely apologizes for the inconvinience and concern this incident has caused to players worldwide. We understand that apologies and compensation cannot immediately bridge the gap in trust; therefore, we humbly ask for your patience as we work to provide continuous, stable service to every player.
If you have any remaining questions regarding the impact of this incident, please contact us via Customer Service: ：
Duet Night Abyss Team