Skip to content
High-Stakes Online Poker Malware Scandal Exposes Players' Hole Cards

High-Stakes Online Poker Malware Scandal Exposes Players' Hole Cards

First seen 5 Oct 2026, 16:26 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 5, 2026 at 17:06 UTC
  • •A malware attack allowed a cheater to view high-stakes poker players' hole cards in real time.
  • •The attack exploited vulnerabilities in Jurojin Poker and IntuitiveTables software via tampered updates.
  • •Cybersecurity expert WolfSec0x0 identified 10 to 30 affected computers across Europe, North America, and Oceania.

A targeted malware attack has compromised high-stakes online poker players, allowing a cheater to view their hole cards in real time. The attacker exploited vulnerabilities in third-party software, specifically Jurojin Poker and IntuitiveTables, to deliver tampered updates containing remote-access tools. Jurojin Poker confirmed that between June 2025 and January 2026, a select group of users received these compromised updates. Cybersecurity expert WolfSec0x0 first reported the incident, identifying between 10 and 30 affected computers across multiple regions. The malware, based on legitimate software MeshCentral, enabled the attacker to remotely access players' screens. The investigation is ongoing, with Jurojin cooperating with law enforcement and poker-site security teams to address the issue. Players have raised suspicions about certain accounts showing implausibly strong results, leading to further scrutiny.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2025-06-01
Compromised updates began delivery
Tampered updates containing remote-access tools were intermittently delivered to Jurojin users.
Pokernews
2026-01-01
Last compromised update delivered
The final tampered update was sent to targeted Jurojin users, marking the end of the attack period.
Casino
2026-10-01
Jurojin Poker issues statement
Jurojin Poker released a statement detailing the investigation and the nature of the attack.
Pokernews

More articles in this cluster (2)

Following this threat?

Track Absolute Poker in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (12)

1 / 3

Common questions

Which software was compromised?
The malware affected Jurojin Poker and IntuitiveTables, both used by high-stakes players.
How many players were impacted?
Between 10 and 30 high-stakes poker players were identified as potentially affected.
What should affected players do?
Affected players should monitor their accounts for unusual activity and follow guidance from Jurojin Poker.