DE
FR
ES
IT
PL
RU
RO
NL
PTOnline Poker Faces Fresh Superuser Allegations
Summary:
- An X account alleged that around 30 high-stakes poker players had remote-access software installed on their computers.
- Allegedly, attackers could view screens and control devices.
- No poker site has been publicly identified as responsible, and no affected players have been named publicly.
The high-stakes online poker community is facing new questions about security after an anonymous cybersecurity professional claimed that a remote-access tool had been used to target players’ computers.
30 High-Stakes Players Under Attack
The allegations surfaced on X through the account @wolfsec0x0, which had around 230 followers before a series of posts on Tuesday drew widespread attention from poker players.
The account claimed that a covert remote-access agent had been installed on Windows PCs through compromised poker-related software and that around 30 high-stakes players were affected.
No specific poker site or player was publicly identified in the posts.
According to the claims, the software allegedly installed a Windows service known as a “Mesh Agent,” allowing an attacker to remotely access an infected computer. The account said the alleged access could include viewing the screen in real time, including poker tables and hole cards, as well as controlling the mouse and keyboard.
The agent belongs to MeshCentral, legitimate open-source remote-management software.
— WolfSec0x0 (@wolfsec0x0) September 29, 2026
It was installed without the players’ knowledge, runs as a Windows service with full system privileges, and connects to a server run by the attacker.
—
The posts also claimed that attackers could potentially access other information stored on affected computers, including browser passwords, session cookies and saved payment details.
However, the allegations have not been independently verified, and the identity of the person behind the account has not been publicly established.
The account specifically stated that GGPoker and ClubWPT Gold were not involved. It also claimed that two unnamed software vendors were responding to the issue and that current versions of the affected software were no longer distributing malicious code.
Third-Party Tool Allegedly Used
That distinction could be important. Todd Witteles, a longtime poker commentator, noted on X that the alleged compromise involved a third-party tool rather than online poker software itself.
The claims have nevertheless caused concern among players because of the potential implications for high-stakes games. A genuine remote-access compromise could theoretically expose information far beyond poker activity, depending on what access an attacker obtained.
This is not the first time when the massive online poker community has been subject to cheating and security controversies. The long lits of such incidents included the UltimateBet “POTRIPPER” scandal that emerged in the 2000s.
More recent cheating allegations have also resulted in investigations and disciplinary action within the poker industry.
For now, however, the latest claims remain allegations. No affected players have been publicly named, and further evidence or statements from the software companies involved will be needed to establish what happened, how many users were affected and whether any poker games were compromised.
