www.pokerstrategy.com
Brigistul said:
The spyware did not come from any poker platform. It came from third party poker software used for managing tables while playing. I have never used that kind of software, but presumably it help you arrange your tables, if you are multitabling.Magallaneroy said:
This is incorrect. The tool is a legitimate tool not malware and it was delivered through a trusted (signed) software. It was also reported that it created a path exclusion on some of the victim's systems.Goggelheimer said:
Sorry to say that your misconception of pc security is lacking some small parts.S3mper said:
This is certainly true and in fact you understate it.Goggelheimer said:
I actually more or less agree with you. I misunderstood "a good" virus scanner as something like Microsoft Defender but yes, an Enterprise AV/EDR would have been more likely to have detected it. (Assuming they had it tuned to do so.)Goggelheimer said:
You picked the only one that has such detection level ("Mircosoft defender" because it´has no price it has no worth).S3mper said:
This is not exactly something new. The same kind of cheating happened already 15-20 years ago. Doug Polk got a refund from PokerStars after being cheated in heads-up games by a specific opponent. And a danish pro went to jail for having planted this kind of spy software on the laptops of other high stakes players. But yes this can still happen, so obviously people should be aware and protect themselfes, especially if they play high stakes cash games.Mwaki said:
Another thing I'd point out is the majority of us at micro-low stakes don't even likely require such table management software as most likely can't even affectively double table and make a profit. And if you're only double tabling all one needs is a 17' laptop for us older guys with not great eye sight or a 32' monitor for your desktop. You don't even really need a 32' but I game and sim-race as well. Then you just resize the tables to go side by side on the screen no table management software required.fundiver199 said:
I absolutely dont need table management software to play 4-6 tables on my laptop either. On GG Poker you can save set-ups, so its just a single click on a button. And on other sites I simply resize and drag the tables into place, where I want them, one by one. Not a big deal at all. Plus if people are engaging in that kind of criminal activity, they obviously want to win as much money as possible, so they are never going to target some random 10NL or 25NL player.hardongear said:
Fwiw I wouldn't put you in the majority. Yeah that kind of software has some great features and is very helpful too those playing many many tables no doubt. Very few people are like Chris Moorman thou who play 4-6+ screens and 20-24+ tables and likely still does when he plays online. I have no idea what the max amount of tables per site is now. Guys like him are machines and pretty rare.fundiver199 said:
Write-Host "`n=== SEARCHING 4 MESH AGENT ===" -ForegroundColor Cyan
$names = @(
"meshagent.exe",
"meshagent",
"MeshCentralAgent",
"Mesh Agent",
"meshcentral"
)
$roots = @(
"$env:ProgramFiles",
"${env:ProgramFiles(x86)}",
"$env:ProgramData"
)
foreach ($root in $roots) {
if (Test-Path $root) {
foreach ($name in $names) {
Get-ChildItem -Path $root -Recurse -Force -ErrorAction SilentlyContinue -Filter $name |
Select-Object FullName, Length, LastWriteTime
}
}
}
Write-Host "`n=== WINDOWS SERVICES ===" -ForegroundColor Cyan
Get-CimInstance Win32_Service |
Where-Object {
$_.Name -match '(?i)meshagent|meshcentral' -or
$_.DisplayName -match '(?i)mesh agent|meshcentral' -or
$_.PathName -match '(?i)meshagent|meshcentral'
} |
Select-Object State, Name, DisplayName, PathName
Write-Host "`n=== PROCESSES ===" -ForegroundColor Cyan
Get-Process -ErrorAction SilentlyContinue |
Where-Object {
$_.ProcessName -match '(?i)^meshagent$|^meshcentral'
} |
Select-Object Id, ProcessName, Path
Write-Host "`n=== DONE ===" -ForegroundColor Green