PokerStars, Full Tilt players vulnerable to Trojan that lets others see hole cards

[The Buzz]

Sounds like online poker players have some new malware to look out for. At least "several hundred" players have been impacted by malware that looks innocent, but it surreptitiously sending screenshots of PokerStars and Full Tilt screens to another player, who can then find and join the table where the player is and run over the player, as they'll be able to see the other player's hole cards.

Full report here: http://blog.eset.ie/2015/09/17/the-t...eats-at-poker/

[universal4]

So where is the ip or hostname address that is hard coded into the software?

Whoever did all this research and reverse engineering, as well as packet inspection and forensics to figure out what is taking place and how the trojan is working and how the scumbags are using it, fails to provide millions of people with the information needed to stop the scumbags in their tracks even if they can not remove the trojan.

By knowing the ip or hostname, and entry could be added to the host file, or a block added to the firewall and the trojan would be rendered useless even if it could not be removed.

Also the web host as well as upstream providers could be notified as this is pretty clear proof of illegal hacking activity and would show whether the host is willing to follow policies.

Depending on the subnet this server is in, I would most likely consider blocking the ip globally on all servers on my rack as this certainly is an indication of a bad actor.

Rick
Universal4

[Miles_FTA]

So is this allowing players to basically learn a pattern of play by them receiving these screenshots and then giving them the edge on a table ?

[DaftDog]

So is this allowing players to basically learn a pattern of play by them receiving these screenshots and then giving them the edge on a table ?

No, the malware sends a screenshot instantly after a new hand is dealt so that the spy can see what his target-players hole cards are.

[ocreditor]

Thats amazing discovery, if its so simple to implement this to PS and FT imagine how much money is flowing to the same pockets
of the cheaters