Malware exposes high-stakes poker players’ hole cards in real time
Jurojin says the tampered updates were delivered intermittently to a small group of users.
The hit
High-stakes online poker is facing a new superuser-style scandal after malware let an attacker secretly view players’ screens & hole cards in real time, according to Casino.org. Poker-management software providers Jurojin Poker & IntuitiveTables were both compromised, with Jurojin calling it a “highly targeted operation” by a “known cheater.”
Why it matters
For high-stakes players, it means an opponent could have seen their cards live during a hand, turning skill-based losses into alleged theft. It revives fears last seen in the UltimateBet & Absolute Poker scandals, where insiders used hidden-card access to drain opponents over weeks.
The record
| Jurojin tampered updates | June 2025 to January 2026, delivered intermittently (Jurojin Poker) |
|---|---|
| Computers initially flagged | 10 to 30 across Europe, North America & Oceania (researcher WolfSec0x0) |
| Alleged victim loss | $100,000 to $200,000, including $60,000 in one 15-minute session (high-stakes player Ignacio Morón) |
| Funds confiscated on a separate account | more than $100,000, reimbursed to affected players (CoinPoker ambassador Patrick Leonard) |
| 2007 precedent payout | $1.6m promised in refunds after seven cheating accounts (Absolute Poker) |
What happens next
Watch for Jurojin’s & poker sites’ security teams to report findings to law enforcement, & for operators to follow ACR Poker in rolling out screen-capture defences.
Sources: Online Poker Hit by New ‘Superuser’ Scandal as Malware Exposes Players’ Hole Cards
Named in this story? Reply to newsdesk@infobets.com & we publish it.
18+. Betting involves risk. If gambling is a problem for you or someone close to you, help is available.
Discussion
Ask a question, add useful context or share a source. Keep it relevant & respectful.
Add a comment
Comments are reviewed before publication.