Hundreds of online poker players may have suffered financial losses after a suspected cheating operation allegedly used malware to view opponents’ computer screens during games. The reported campaign affected players across several major online gambling services, though the total amount lost has not been established.
According to Wired, the alleged attacker used external applications designed to help players manage multiple poker tables to install MeshAgent, a remote administration program, on selected opponents’ computers without their knowledge. The software reportedly allowed the attacker to see activity on those screens, potentially including players’ private cards.
The alleged conduct is known as “superuser” cheating: gaining information unavailable to other participants. Access to opponents’ cards could have influenced decisions during high-stakes hands, but the available account does not specify how many games were affected or which results were compromised.
Poker services reportedly responded in different ways. One platform removed the account after its monitoring system flagged unusually strong results and questionable playing patterns, before the allegations became public. Other services issued security checks to help customers determine whether MeshAgent was installed on their computers.
Another operator reportedly received complaints but allowed the suspected cheater to keep playing. The company later said its investigation found no evidence that compromised devices had affected game results and declined to reimburse customers who believed they had lost money because of the alleged cheating.
The person suspected of carrying out the scheme is reportedly known in poker circles, but their identity was withheld because no criminal charges have been filed. There is no information on the total amount stolen, the number of confirmed victims, or whether authorities are investigating the case.
The allegations also highlight the security risks of installing third-party tools to organize simultaneous poker games. Such software can create additional routes for malicious programs to reach players’ computers, beyond the protections provided by gambling platforms.
Sources: TechRadar.