Engadget Malware Attack Exposes Online Poker Players' Cards
Article Content
- •A malware called MeshAgent was used to capture screens of online poker players.
- •Hundreds of players may have been targeted, with millions reportedly stolen.
- •Responses from online poker platforms varied, with some taking action against the suspected cheater.
A malware attack targeting online poker players has reportedly stolen millions of dollars. The attack utilized a program called MeshAgent, which was secretly installed on players' computers, allowing the hacker to capture screens and gain unfair access to opponents' cards. Professional player Alex discovered the malware after noticing suspicious activity while using his AI agent. Investigations revealed that hundreds of players were affected, with one player, known as OxOO, suspected of cheating in multiple sessions. The attack has raised concerns about the security of online poker platforms, with varying responses from different sites. Some sites banned the suspected cheater before the malware was publicly uncovered, while others failed to act despite player complaints. The incident highlights ongoing vulnerabilities in online gaming environments.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track MeshAgent and IntuitiveTables in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
How many players were affected?
What is MeshAgent?
What actions have poker platforms taken?
Continue Reading
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…
KeyDrift Malware Exploits Cisco SD-WAN Flaw CVE-2026-20127 Cisco Talos reported that the advanced persistent threat group UAT-11473 exploited a critical authentication bypass vulnerability (CVE-2026-20127) in Cisco SD-WAN Catalyst Controllers. This flaw, which has a CVSS score of 10.0, allows unauthorized remote access to administrative privileges. The group deployed a custom…