EA Origin exploit lets hackers hijack your PC, technically | PCGamesN

InXile to give Wasteland 2 a graphical overhaul with Unity 5 engine

Elite: Dangerous to see new station orbiting planet Vulcan, named after the late Leonard Nimoy

The best Hearthstone decks for beginners

EA Origin exploit lets hackers hijack your PC, technically

ReVuln, the company who revealed a potential exploit within the Steam client last October, have done it again. This time they demonstrated in front of an audience at a Black Hat security conference in Amsterdam that hackers could easily hijack computers with EA’s Origin client installed. There are caveats, however.

"The Origin platform allows malicious users to exploit local vulnerabilities or features by abusing the Origin [Uniform Resource Identifiers] handling mechanism," ReVuln researchers Donato Ferrante and Luigi Auriemma say in their paper detailing the exploit they demonstrated. "In other words, an attacker can craft a malicious Internet link to execute malicious code remotely on [a] victim's system, which has Origin installed."

Essentially, what usually happens when you boot a game through Origin is that it connects to a web link to launch the game. All the hacker has to do to exploit this system is change the URL which Origin attempts to open when you boot a game. If that URL were changed to a site storing malware clicking on a Battlefield 3 server in EA’s Battlelog could inadvertently install malicious software on your computer.

Now, while this exploit has been spotted it isn’t the most convenient thing to arrange from the hacker’s point of view. For one thing, many browsers will still detect the illegal action being performed and ask that you confirm you want to go to such and such address. So long as you read the address that you are being directed to and it’s a legitimate EA URL then you should be fine. Also, there’s the question of how a hacker can get to your Origin client to alter its URLs, something ReVuln don’t go into. So, as per usual, make sure you have your antivirus software up-to-date and don't go to any sites that are clearly shifty. You know the ones.

Thanks, Ars Technica.

 

Login or Register
Try these free to play games
?

These are affiliate links - clicking them and playing the games directly supports PCGamesN

Spotlight
?

Our Spotlight units plug content our journalists have made, that our advertisers want to promote. Sometimes the promotion is paid for, but the content they go to is always independent with no client oversight or approval.


Alienware - Game VictoriousTurtle Beach
The best Hearthstone decks for beginners

Hearthstone: Heroes of Warcraft

The best Hearthstone decks for beginners

InXile to give Wasteland 2 a graphical overhaul with Unity 5 engine

InXile to give Wasteland 2 a graphical overhaul with Unity 5 engine

Elite: Dangerous to see new station orbiting planet Vulcan, named after the late Leonard Nimoy

Elite: Dangerous to see new station orbiting planet Vulcan, named after the late Leonard Nimoy

Remembering Leonard Nimoy in games

Remembering Leonard Nimoy in games

Mortal Kombat X story trailer introduces new fighters who have emerged from the loins of old ones

Mortal Kombat X story trailer introduces new fighters who have emerged from the loins of old ones

We Happy Few makes blissful ignorance seem a bit horrifying

We Happy Few makes blissful ignorance seem a bit horrifying

Weekend Deal Dump: Maps, maps, maps

Weekend Deal Dump

Weekend Deal Dump: Maps, maps, maps

Underworld Ascendant reaches its Kickstarter target; stretch goals include swampy fun

Underworld Ascendant reaches its Kickstarter target; stretch goals include swampy fun

Nvidia just swiped a little chunk of AMD's market share

Nvidia just swiped a little chunk of AMD's market share

Take On Mars gets Gravity style space walks

Take On Mars gets Gravity style space walks

Battlefield Hardline developer is reeeaaally excited about the PC version of Battlefield Hardline

Battlefield Hardline developer is reeeaaally excited about the PC version of Battlefield Hardline

Free to play Tera is getting flying guild fortresses

Free to play Tera is getting flying guild fortresses

How good a job have Gearbox done in remastering Homeworld?

Homeworld Remastered

How good a job have Gearbox done in remastering Homeworld?

Latest Hearthstone patch hints at Molten Core expansion

Latest Hearthstone patch hints at Molten Core expansion

Resident Evil: Revelations 2 may have offline co-op yet; Capcom looking into a solution

Resident Evil: Revelations 2 may have offline co-op yet; Capcom looking into a solution

Final Fantasy XIV is celebrating reaching 4 million accounts with free time for lapsed subscribers

Final Fantasy XIV is celebrating reaching 4 million accounts with free time for lapsed subscribers

The FCC will vote on net neutrality today

The FCC will vote on net neutrality today

Far Cry 4: Valley of the Yetis doesn't look abominable

Far Cry 4: Valley of the Yetis doesn't look abominable

The 21 best RPGs on PC

Best PC RPGs

The 21 best RPGs on PC

Elite: Dangerous 1.2 will let you take ship selfies

Elite: Dangerous 1.2 will let you take ship selfies

Nvidia are holding a Hearthstone tournament. Sign up for a chance to nab some of the $25,000 prize pool

Nvidia are holding a Hearthstone tournament. Sign up for a chance to nab some of the $25,000 prize pool

Nosgoth’s new Vanguard class is available right now

Nosgoth’s new Vanguard class is available right now

Fable Legends will be free-to-play and cross-platform

Fable Legends will be free-to-play and cross-platform

Guild Wars 2 will stick a camera in your head for upcoming first person view

Guild Wars 2 will stick a camera in your head for upcoming first person view