Jurojin Poker has acknowledged a large-scale hack
Jurojin Poker software developers gave an interview about the recent hacking scandal. As a reminder, the attackers used third-party software to see players' cards.
How did the hack happen?
The hackers injected malicious code into an official Jurojin update. As a result, Mesh spyware was passively installed on users' PCs, allowing the attackers to stream their victims' screens. For a long time the developers mistook the suspicious activity for the work of ordinary pirates churning out cracked copies of their software, which is why they missed the moment of infection.
Who was affected?
High-stakes players were the primary targets, mid-stakes players to a lesser extent. There turned out to be more infected PCs than accounts the hackers ultimately played against. It's impossible to compile an exact list of victims, since the hacker covered his tracks and constantly moved users between update groups, but those who have been identified are being notified personally.
What should players do?
Low-stakes players have no reason to panic — no instances of "sniping" at micro stakes have been found. However, the general recommendation for everyone is to completely wipe the system and reinstall it. If that's inconvenient, you need to run their check tool to make sure Mesh has been removed.
What measures have already been taken?
The developers have updated their security system and rolled out a protective patch, implementing code checks to safeguard the entire supply chain against repeat breaches. The periodic hand-saving feature, which was used to diagnose connectivity, has been removed from the software — logs are now written only manually when sending a bug report, which completely rules out leaks of data about playing style. In addition, the team has prepared detailed reports on the organizer of the attack and has already handed them over to poker room security services and international law enforcement agencies.
📰 Subscribe to Pokerflow
How did the hack happen?
The hackers injected malicious code into an official Jurojin update. As a result, Mesh spyware was passively installed on users' PCs, allowing the attackers to stream their victims' screens. For a long time the developers mistook the suspicious activity for the work of ordinary pirates churning out cracked copies of their software, which is why they missed the moment of infection.
Who was affected?
High-stakes players were the primary targets, mid-stakes players to a lesser extent. There turned out to be more infected PCs than accounts the hackers ultimately played against. It's impossible to compile an exact list of victims, since the hacker covered his tracks and constantly moved users between update groups, but those who have been identified are being notified personally.
What should players do?
Low-stakes players have no reason to panic — no instances of "sniping" at micro stakes have been found. However, the general recommendation for everyone is to completely wipe the system and reinstall it. If that's inconvenient, you need to run their check tool to make sure Mesh has been removed.
What measures have already been taken?
The developers have updated their security system and rolled out a protective patch, implementing code checks to safeguard the entire supply chain against repeat breaches. The periodic hand-saving feature, which was used to diagnose connectivity, has been removed from the software — logs are now written only manually when sending a bug report, which completely rules out leaks of data about playing style. In addition, the team has prepared detailed reports on the organizer of the attack and has already handed them over to poker room security services and international law enforcement agencies.
📰 Subscribe to Pokerflow
