International news

  On September 29, 2026, another major cybersecurity incident occurred in the online poker community. An anonymous user claiming to be a cybersecurity professional, using the account "@wolfsec0x0," posted a series of messages alleging that high-stakes online poker players' Windows computers had been infected with a stealthy remote access program, with an estimated 30 players affected. If these claims are ultimately confirmed, the danger of this incident goes beyond a simple account intrusion. According to the account, attackers could potentially view victims' computer screens in real time, including hole cards at the online poker table, and even remotely control the mouse and keyboard. However, as of the time of PokerNews's publication, the affected players, the involved third-party software, and the technical evidence to fully verify the incident have not yet been disclosed. Therefore, this incident should still be considered a significant but unconfirmed cybersecurity allegation. Approximately 30 high-stakes players are suspected of being affected, with the incident dating back to 2024 and triggered by a series of public posts by @wolfsec0x0. The account had only about 230 followers before posting, but the allegations quickly sparked a lot of discussion in the poker community. According to the account holder, investigators discovered a hidden remote access proxy on some players' Windows computers, and the malware may have been spread through compromised poker-related software. It is currently estimated that approximately 30 players were affected, and all victims are high-stakes online poker players. The account holder also stated that the malicious activity dates back to as early as 2024. The publicly available information regarding this incident includes: a known source of the leak (account X @wolfsec0x0, claiming to be a cybersecurity professional); an estimated 30 people affected; primarily high-stakes online poker players using Windows PCs; a suspected Mesh Agent program; and potential capabilities including real-time screen viewing, obtaining hole cards, and controlling the mouse and keyboard. The earliest activity dates back to 2024. The names of affected players have not yet been released. The third-party software involved has not been disclosed. Complete public evidence is still pending. The "Superuser" model differs: it doesn't directly read the poker server's hole cards. In the poker world, "Superuser" usually implies someone who can directly see other players' hole cards. The infamous "POTRIPPER" incident of the 2000s is one of the most representative Superuser scandals in online poker history. However, the accusations in this incident are different. According to current public statements, the attacker doesn't necessarily need to directly hack into the poker platform server, but rather obtain information on the screen by controlling the player's own computer. If the attacker can view the victim's screen in real time, then when the player is playing online, their hole cards will appear directly in the monitored screen. Therefore, in practical terms, attackers could also gain a significant, unfair advantage, akin to "seeing the opponent's hand." Mesh Agents are becoming a technological advancement.