A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards

A hacker deployed MeshAgent — a legitimate remote management tool repurposed as malware — to silently infiltrate high-stakes poker players' computers, granting full visibility into their hole cards and control over their machines. The attack persisted for years because victims lacked the security awareness to detect unauthorized software running on their systems and had no meaningful endpoint monitoring in place. This matters because the financial and reputational damage was compounded by the prolonged dwell time: better endpoint hygiene and user vigilance could have caught the intrusion far sooner. The case illustrates that even non-corporate individuals handling significant financial transactions are high-value targets requiring professional-grade security practices.