Jurojin Poker Details Targeted Superuser Attack After Cybersecurity Exposure
Jurojin Poker responded to a superuser scandal exposed by @wolfsec0x0 that used tampered updates to install Mesh spyware on high-stakes players’ PCs. The firm is notifying affected users, recommending system wipes, and has filed authority reports while crediting the researcher. It apologized directly to victims and detailed new security code changes.
SCCG Take — Targeted software supply-chain attacks require operators to maintain constant vigilance on update integrity and user notification processes to limit damage and preserve platform trust.
Jurojin Poker became aware of a superuser attack through a public investigation by cybersecurity expert @wolfsec0x0 and suspicions from high-stakes players. The company had initially attributed unusual activity to crackers selling pirated copies of its software. One high-stakes player, Ignacio Moron, believes he lost at least $100,000.
The attack used a tampered update to install spyware known as Mesh. It focused mainly on high-stakes players, to a lesser extent on mid-stakes, and to a much lesser extent on low-stakes. Infections occurred on more machines than the attacker ultimately exploited for hand sniping.
Scope of Compromise and User Notifications
Jurojin Poker maintains a list of users confirmed to have been in affected version groups at specific dates and times. The firm is notifying those users directly. Complete identification remains difficult because the attacker moved targets between groups and deleted traces. Continuous backups of the relevant database are not feasible.
Low-stakes players show no evidence of targeted card sniping. The company still advises a full PC wipe and reinstall for complete assurance or at minimum running its tool to detect Mesh. According to reporting by PokerNews, the attack was passive on Jurojin’s side once the update delivered the spyware.
Measures Taken and Message to Players
The company credited the researcher known as Wolf with discovering the attack and leading the investigation. Jurojin supported that effort with additional reporting and assessment. It has filed reports with international authorities in relevant jurisdictions and deployed code changes that remove periodic hand saving while adding supply-chain security validations.
Jurojin Poker stated it takes the matter extremely seriously. The firm pushed back against claims that one targeted incident could damage the broader industry. Player pools, tournaments, cash games and spins continue to run at volume across casinos. “To everyone who was affected, we are truly sorry.”
Reporting: PokerNews
Generated by SCCG’s automated editorial system from published source reporting. SCCG Management holds editorial responsibility.
Gaming, betting and prediction markets — the desk’s read, every weekday.
Subscribe →