Targeted malware attack compromises online poker players

Cybersecurity expert WolfSec0x0 has reported a highly targeted malware attack affecting online poker players. The attack involves compromised versions of poker software, specifically identifying Jurojin and IntuitiveTables, which allowed for the covert installation of remote-access software. This enabled attackers to view screens, control mice and keyboards, and potentially see players' hole cards in real time.

The attack was not a broad campaign but a selective one. The malware reportedly scanned hand history files for specific usernames; if a match was found on the attacker's command-and-control server, the malicious components were downloaded. Approximately 10 to 30 players across Europe, North America, and Oceania have been confirmed as victims, with activity dating back to March 2024.

Both software providers are aware of the issue and are collaborating to resolve it, noting that recent versions have been cleaned. Experts advise affected users to disconnect from the internet immediately and change passwords for poker, crypto, and email accounts from a clean device, while preserving evidence for potential police investigation.