What happened
Jurojin Poker, one of two poker software products compromised in the superuser scandal, published an apology on October 9. The company says it learned of the attack the way the public did, through cybersecurity researcher @wolfsec0x0's investigation and suspicions raised by high-stakes players. It describes a highly targeted operation in which a tampered package replaced a legitimate update, installing spyware called Mesh on more PCs than the attacker used to snipe hands. The scandal has affected over two dozen high-stakes players.
Jurojin says the attack mainly hit high-stakes players, less so mid-stakes and much less so low-stakes. It has a list of users confirmed in affected version groups and is notifying them directly. It warns the list may be incomplete, because the attacker moved users between groups and removed them quickly, and continuous backups of its database were not feasible. Low-stakes players are advised to wipe and reinstall their PCs or run the company's Mesh-check tool. Jurojin has also dropped periodic hand-saving, added internal security checks and filed reports with authorities abroad.
The statement reads "To everyone who was affected, we are truly sorry." It calls the attack "a blow to our ego." It says it would "love for the affected users to get their funds back" and that casinos have a major responsibility to make that happen. High-stakes player Ignacio Moron believes he was cheated out of at least $100,000.
Why it matters
The company that shipped the software is telling casinos what they owe, while saying it cannot be sure who it harmed. The apology covers the PCs, the ego and the authorities. The refund covers whoever else is in the room.
None of this is a finding against a named player. Jurojin says it had suspicions about a few accounts and could not confirm any, and that analyzing gameplay is the casinos' job.
