Loading story…
US authorities have indicted NBA figures and organized crime members for orchestrating a high-stakes poker scam that exploited vulnerabilities in Deckmate 2 automatic card shuffling machines. The perpetrators allegedly manipulated these shufflers to rig games, enabling them to cheat high-roller participants out of significant sums. The scheme also reportedly involved the use of covert cameras and an X-ray card table to further tilt the odds in their favor, highlighting the intersection of traditional organized crime tactics with modern technology.
The case has drawn attention to the broader security implications of automated gaming devices, as similar hacking techniques have been demonstrated by security researchers. The incident underscores the risks posed by insecure casino technology and the potential for such vulnerabilities to be exploited for large-scale fraud. The involvement of high-profile individuals from both the sports and criminal worlds has amplified the scandal, prompting calls for increased scrutiny and security measures in gambling environments.
See the reporting duties and controls this puts on the clock.
5 events from the most recent confirmed update back to the earliest known activity.
Wired published a podcast episode focused on how poker games can be hacked, reflecting broader public reporting on the alleged poker cheating operation. This appears to be follow-on coverage rather than a separate incident.
Security coverage also referenced a cyberattack affecting Russia's food safety agency, indicating the incident had become publicly known. No further operational details were provided in the source material.
Recent security reporting referenced an Android backdoor campaign capable of taking over Telegram accounts. The mention indicates public disclosure of technical and operational details about the threat.
A security flaw in an FIA driver portal exposed sensitive personal information belonging to Formula 1 drivers, including passport and license details. The incident affected a high-profile regulatory system tied to international motorsport.
A sophisticated cheating operation allegedly used hacked automatic card shufflers, covert cameras, and an X-ray-enabled card table to defraud high-roller poker players. The scheme was reportedly tied to organized crime and involved well-known basketball figures.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Taiwanese authorities indicted 10 people over an alleged money-laundering scheme that investigators said cleaned more than **NT$33 billion** (`$1.03 billion`) in illegal gambling proceeds through Macau casinos. Prosecutors said the network used money mules’ bank accounts to inflate credit card limits, then bought and cashed out casino chips to disguise the source of funds. The probe has led to 20 arrests, while two suspected ringleaders remain fugitives under long-term arrest warrants. On the same day, Taiwan’s Criminal Investigation Bureau confirmed that gambling fugitive **Lin Ping-wen**, previously indicted in the **88 Lounge** fraud and laundering case, was shot dead in Cambodia, adding to scrutiny of a wider criminal network that also implicated 88 Lounge owner **Kuo Che-min**. In Thailand, authorities announced the seizure of an additional **8.3 billion baht** (`$260 million`) in assets tied to an alleged laundering network linked to Cambodia-based cyber scam operations, raising total confiscations in the case to more than **20 billion baht** (`$620 million`). The widening investigation has focused on transnational scam and laundering networks operating across mainland Southeast Asia, including scrutiny of businessman **Benjamin Mauerberger**, **Yim Leak**, their spouses, and other associates accused of helping move illicit proceeds. Thai investigators have also pursued arrest warrants and sought international cooperation, reflecting mounting regional pressure to disrupt cyber-enabled fraud and the financial infrastructure supporting it.
Jun 29, 2026
MGM Resorts and Caesars Entertainment were hit in closely timed cyberattacks that investigators and security firms tied to the **Scattered Spider** criminal community, a loose English-speaking group known for social engineering, SIM swapping, phishing, and MFA fatigue. Caesars disclosed that attackers stole customer data and reportedly paid a ransom demand, while MGM suffered a far more disruptive intrusion that knocked hotel and casino operations offline for days and was later estimated to have cost about **$100 million**. Multiple reports said the intrusions involved help-desk impersonation and other employee-targeting tactics, with Scattered Spider affiliates also linked to ransomware operators including **BlackCat/ALPHV**. The fallout expanded beyond the initial breaches as Caesars sent breach notifications to thousands of affected people and both casino companies faced lawsuits and class actions alleging failures to protect personal information. Law enforcement pressure then intensified: investigators in the US, UK, and Spain pursued suspected Scattered Spider members, including a 22-year-old British man arrested in Spain as an alleged leader and a 17-year-old arrested in the UK over the MGM attack, with additional US arrests and prosecutors reportedly moving closer to charges. Security researchers said the Las Vegas casino intrusions put a bullseye on the group, which had evolved from SIM-swapping into ransomware, extortion, and cloud-focused intrusions against major enterprises.
Jun 29, 2026
International law enforcement agencies dismantled three interconnected credit card fraud and money laundering networks responsible for defrauding millions of victims worldwide. The operation, coordinated by Eurojust and Europol and involving authorities from Germany, the USA, Canada, Singapore, Luxembourg, Cyprus, Spain, Italy, and the Netherlands, resulted in the arrest of 18 individuals, including five executives from four German payment service providers. The fraudsters used stolen credit card data to create fake online subscriptions for dating, pornography, and streaming services, keeping charges below €50 to avoid detection and laundering proceeds through shell companies and complicit payment providers. Authorities estimate the fraud affected over 4.3 million cardholders, involved 19 million accounts, and resulted in losses exceeding €300 million, with attempted fraud totaling more than €750 million. The investigation began in Luxembourg and expanded globally, with German authorities conducting 29 searches and seizing assets worth over €35 million, including luxury vehicles, cryptocurrency, and electronic devices. The suspects, hailing from multiple countries, are accused of exploiting payment infrastructure and using shell companies in Cyprus and the UK to obscure transactions. The operation, dubbed "Operation Chargeback," highlights the role of complicit financial service providers and the use of "Crime-as-a-Service" vendors to facilitate large-scale, cross-border financial crime. The case underscores the complexity and international scope of modern payment fraud and the importance of coordinated law enforcement action.
Jul 12, 2026