It affects users of services such as Partypoker, Empirepoker, etc.
The company F-Secure has detected a “back door” in Rakeback Calculator, a system that is widely used by online poker players. This tool is distributed by the site Checkraised.com. The authors of the software used a rootkit technology in order to hide the malicious program.
This “back door”, allows the illegal remote control of the infected computers, works by installing 4 executable files. When they're installed, the attacker can access the login information for services such as Partypoker, Empirepoker, Eurobetpoker and Pokernow. Through these services, the hacker can play poker against himself and lose deliberately.
Some time after F-Secure published the information, the malicious code was eliminated from the site Checkraised.com.
The company has published an official explanation, where it advises users to change their online poker passwords. The firm also offers information on how to manually erase the code.