ACR Poker’s Winning Poker Network has activated a new Screen Shield feature for players whose computers were found to be running remote-access, screen-sharing or screen-control software. The measure is intended to stop WPN tables being visible to screen-capture and screen-sharing utilities after attackers gained the ability to view selected players’ hole cards in real time.
ACR Poker chief executive Phil Nagy announced the measure in a statement reported by PokerOrg. WPN contacted affected players on Sept. 29 and enabled Screen Shield on their machines. The network plans to add a self-service option in a future software update, while continuing to scan for the relevant software and ask players whether they want the protection switched on.
The safeguard carries practical restrictions. Players using Screen Shield cannot take screenshots of their wins or stream WPN tables on services including Twitch and Kick. Nagy also offered the technology to other poker operators.
As we reported Oct. 1, compromised versions of the Jurojin and IntuitiveTables poker utilities installed a MeshCentral remote-access agent on an estimated 10 to 30 Windows PCs, without evidence that poker-site clients themselves had been compromised. The attack was described as highly targeted, with confirmed activity dating to March 2024 and specific high-stakes players affected.
The apparent access to players’ screens drew reports involving ACR Poker, GGPoker and CoinPoker accounts linked to Paul Gregg. ACR has sent hand histories from affected players to GTO Wizard for analysis and said its broader investigation could result in compensation.
ACR previously announced that, effective Aug. 3, 2023, it would prohibit virtual machines and real-time screen-sharing tools that could be used to gain an unfair advantage, with sanctions ranging from warnings to permanent bans and confiscation of funds.
CoinPoker had already banned an account known as Europe, registered in Gregg’s name, refunded affected players and confiscated more than $100,000.
