Last week’s biggest poker story turned out to be something different than it first looked. The “superuser” account that targeted around 30 high-stakes players wasn’t exploiting a hole in any poker platform’s code, reports indicate the player behind it used malware to gain remote access to opponents’ own computers, effectively watching their screens live while playing against them. It’s a scam built on compromising an individual’s device, not a weakness in any specific poker room’s technology.
That matters, because it means no platform can honestly say “this couldn’t happen here.” Screen-spying malware works the same way whichever room you’re sitting in, the games themselves weren’t the vulnerability. What a platform can control is what happens next: how fast an impossible win rate against one specific opponent gets noticed, and how fast a flagged report gets acted on. The detail that stood out in the original reporting was that warnings had reportedly sat for weeks before anyone did anything about them.
“This one wasn’t a flaw in any poker platform, it’s a player’s device that got compromised, and that’s a different problem to solve. But it doesn’t let platforms off the hook. If someone’s results against a single opponent are statistically impossible, that should get flagged and looked at immediately, whatever’s causing it. The part of this story that should worry every operator is the weeks it took to act once people had already raised the alarm.“
— Simon Isbäck, Head of Poker, Cubeia
We can’t stop malware on a player’s own computer, no platform can. What we can do is make sure nothing anomalous about an account’s results goes unflagged, and that a report from a player or affiliate gets a same-day answer from a real person, not a ticket number. That’s what our 24/7 direct Customer Success line is for.
Source referenced: PokerNews – “Superuser Scandal: Poker Sites Were Warned About Suspicious Account”