Hacker steals millions by scamming high-stakes online poker games with this devious malware attack

• Malware allegedly gave a poker cheat access to opponents’ computer screens
• Hundreds of online poker players may have suffered financial losses
• MeshAgent reportedly helped the attacker monitor selected players during games

Online poker players are facing allegations of a cheating operation that may have cost participants millions of dollars across online gambling sites.

Wired reports that hundreds of people on major gambling platforms were allegedly affected by malicious software installed on selected players’ computers.

The software allegedly allowed the attacker to monitor victims’ computer screens and obtain information that could influence decisions during poker games.

Malware allegedly exposed players’ private information

The incident involves a form of poker fraud known as “superuser” cheating, in which someone obtains information unavailable to ordinary participants.

Rather than exploiting one poker platform directly, the alleged attacker reportedly took advantage of external applications used to manage multiple tables.

Those applications allegedly provided a way to install MeshAgent, a remote administration programme, on computers belonging to selected opponents without their knowledge.

After installation, the software reportedly enabled the intruder to view activity displayed on victims’ computers while they played online poker.

Such access could expose opponents’ private cards, giving the person controlling the malware information unavailable through legitimate participation during games.

That advantage could influence decisions during expensive hands and allow the alleged cheater to win money from unsuspecting players.

The activity is described as a prolonged campaign involving customers across several major online poker services, rather than one isolated incident.

The reports claim the perpetrator is known within poker circles, but withheld the person’s identity because no criminal charges have been filed.

Different platforms take different approaches to the allegations

The companies involved have responded differently, with one service reportedly removing the account before the malware operation became publicly known.

That platform had identified unusually strong results and questionable playing patterns through its monitoring system.

Other services released security checks intended to help customers establish whether MeshAgent had been installed on their computers.

Another operator faced complaints about the account yet reportedly allowed the suspected cheater to continue playing on its platform.

The company later said its investigation had found no evidence that compromised devices had affected the results of games.

It also refused to reimburse customers who believed the alleged cheating had caused them significant financial losses.

That response has left affected players uncertain about whether they can recover money and how responsibility for losses will be determined.

If the reported screen access occurred, investigators would need to identify compromised accounts and establish which games produced unfair results.

Such an assessment could be difficult because the alleged activity involved many players and several separate gambling services.

The case also draws attention to risks associated with software that poker participants install independently to organize simultaneous games.

Although these applications can make multi-table play easier, they may introduce additional ways for malicious programmes to reach personal computers.

Players using such tools may therefore need to consider security risks beyond those covered by the gambling platforms themselves.

As of the time of writing, there is no information on the total amount stolen, the number of confirmed victims, or whether authorities are investigating the case.