Poker Player Alleges His Hole Cards Were Hacked in Wired Magazine

The major American tech and culture magazine Wired has published a piece in which an unidentified professional poker player going by the pseudonym “Alex” claims that malicious actors had surreptitiously installed malware that had shared his hole cards with one of his opponents online.

He shared the screen name of the alleged superuser: OxOO on Americas Cardroom.

According to Wired, in September 2026, Alex was using his Claude AI agent to analyze his playing statistics. After his SQL database crashed and had to be reset, the Claude agent detected something unusual: a program named MeshAgent was running in the background, apparently capable of recording Alex's screen and even taking control of his entire computer.

Following the agent's warning, he discovered that the program had been installed on April 24th, without his knowledge or consent. Alex told the magazine that the AI agent identified 11 separate, time-stamped instances in which MeshAgent had apparently captured his screen, leaving behind graphical glitches during screen-sharing sessions.

On all 11 occasions, Alex had been playing on ACR, one of the world's major online poker platforms. OxOO played at his table in 10 out of those 11 sessions.

Upon further investigation, Alex found on a third-party tracking site that the suspicious account had been winning at rates unimaginable even for highly skilled professional poker players. Fans of the card game may feel a bit of déjà vu here: two of poker’s most infamous cheating scandals, the “potripper” case on the online room UltimateBet from 2007 and the Mike Postle cheating scandal on the Stones Gambling Hall live cash game streams, also had unrealistic win rates as one of the most compelling evidence of cheating. 

In September, Alex, a professional online poker player, was using his Claude AI agent to review some statistics when it noticed something suspicious: A program called MeshAgent was operating in the background—installed in April, and not by Alex himself. https://t.co/Grg5Z3TCoG

— WIRED (@WIRED) October 29, 2026

An investigation launched by Alex and other members of the high-stakes poker community in the days that followed confirmed his suspicions, revealing an even wider operation. Over a period of several years, hundreds of players were allegedly targeted by the same hacker using similar malware. Alex, the first to detect MeshAgent on his computer, estimates that he lost around $30,000, which he describes as a relatively small amount given the stakes he typically plays. Many other players suffered considerably greater losses.

With millions of dollars allegedly siphoned from players across some of the internet's largest poker platforms, the poker community is now demanding answers. Questions remain over how the operation managed to persist for so long, whether major poker sites adequately addressed the threat after it was brought to their attention, and whether the integrity of online poker has been permanently undermined.

How Did the Alleged Cheater Hack the Player’s Hole Cards?

According to a cybersecurity expert going by the name “WolfSec,” the hacker did not target the individual players’ computers. Instead, they went for the third-party software Jurojin and IntuitiveTables, which are multi-table management tools typically used by high-volume online pros. The malicious actor managed to compromise their software distribution systems, using hijacked updates to Jurojin and a modified release of IntuitiveTables to install the MeshAgent remote-access software on players' computers.

The same cheater was allegedly active on CoinPoker and ClubWPT Gold as well. However, another poker player who used the pseudonym “Mike” for the story told Wired that the superuser was banned from ClubWPT after a very suspicious two-hour NLHE heads-up game against him. Mike also got his losses refunded by the poker site.