A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards
Illicit software on the computers of some of the world’s best online poker players allowed the accused cheater to see what cards were in the victims’ hands—and trounce them at the tables.
On September 25, 2026, a professional online poker player named Alex experienced a setback when his SQL database crashed, forcing him to reset it. As he attempted to recover, his AI agent, Claude, detected a suspicious program called MeshAgent operating in the background. This program had been installed on April 24 and had been capturing Alex's screen during poker sessions on ACR (Americas Cardroom), a major worldwide online poker operator.
Alex noticed the program had been active 11 times during screen sharing sessions, all with the same opponent, OxOO, whom he and others in the high-stakes community had previously suspected of cheating. A subsequent investigation confirmed his suspicions, revealing that Alex and hundreds of other players had been targeted by the same threat actor over multiple years.
Estimates suggest that players lost millions of dollars, with Alex himself losing around $30,000. This incident has raised questions about the security measures of major poker sites and the integrity of online poker itself. Previous high-stakes cheating scandals, such as those involving Absolute Poker and Ultimate Bet in the mid-2000s, prompted tighter security measures.
However, this latest case appears to be more sophisticated and patient than previous attacks, potentially indicating a more advanced threat actor.
Written by urgent.news from Wired's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
