Hearthstone pro joins Blizzard as associate game designer

Titanfall gets a new mode, Pilot Skirmish, and Titans aren't invited

No world is safe: Planetary Annihilation launches next week

EA Origin exploit lets hackers hijack your PC, technically

ReVuln, the company who revealed a potential exploit within the Steam client last October, have done it again. This time they demonstrated in front of an audience at a Black Hat security conference in Amsterdam that hackers could easily hijack computers with EA’s Origin client installed. There are caveats, however.

"The Origin platform allows malicious users to exploit local vulnerabilities or features by abusing the Origin [Uniform Resource Identifiers] handling mechanism," ReVuln researchers Donato Ferrante and Luigi Auriemma say in their paper detailing the exploit they demonstrated. "In other words, an attacker can craft a malicious Internet link to execute malicious code remotely on [a] victim's system, which has Origin installed."

Essentially, what usually happens when you boot a game through Origin is that it connects to a web link to launch the game. All the hacker has to do to exploit this system is change the URL which Origin attempts to open when you boot a game. If that URL were changed to a site storing malware clicking on a Battlefield 3 server in EA’s Battlelog could inadvertently install malicious software on your computer.

Now, while this exploit has been spotted it isn’t the most convenient thing to arrange from the hacker’s point of view. For one thing, many browsers will still detect the illegal action being performed and ask that you confirm you want to go to such and such address. So long as you read the address that you are being directed to and it’s a legitimate EA URL then you should be fine. Also, there’s the question of how a hacker can get to your Origin client to alter its URLs, something ReVuln don’t go into. So, as per usual, make sure you have your antivirus software up-to-date and don't go to any sites that are clearly shifty. You know the ones.

Thanks, Ars Technica.

 

Login or Register
Alienware - Game VictoriousNvidia Shield - Titanfall
Internet misogynists drive Anita Sarkeesian out of her house with death threats

Anita Sarkeesian

Internet misogynists drive Anita Sarkeesian out of her house with death threats

Hearthstone pro joins Blizzard as associate game designer

Hearthstone pro joins Blizzard as associate game designer

Titanfall gets a new mode, Pilot Skirmish, and Titans aren't invited

Titanfall gets a new mode, Pilot Skirmish, and Titans aren't invited

No world is safe: Planetary Annihilation launches next week

No world is safe: Planetary Annihilation launches next week

Not going to PAX Prime? There are bundles for that

Not going to PAX Prime? There are bundles for that

Warlords of Draenor's beta patch notes reveal big changes for Hunters

Warlords of Draenor's beta patch notes reveal big changes for Hunters

There was an Elite musical co-written by Ian Bell's brother. You can read the whole thing online now

Elite: Dangerous

There was an Elite musical co-written by Ian Bell's brother. You can read the whole thing online now

Put away your hidden blade: Assassin's Creed Unity delayed by two weeks

Put away your hidden blade: Assassin's Creed Unity delayed by two weeks

S.W.A.P is a first-person shooter with body-swapping and no guns

S.W.A.P is a first-person shooter with body-swapping and no guns

Sledgehammer

Sledgehammer "worked with a Pentagon adviser" for Call of Duty: Advanced Warfare

Empty space: Eve devs CCP lay off high-ranking staff and close San Francisco office

Empty space: Eve devs CCP lay off high-ranking staff and close San Francisco office

The Walking Dead Season 2: No Going Back PC review

The Walking Dead: Season 2

The Walking Dead Season 2: No Going Back PC review

Guild Wars 2 is doing really well in China

Guild Wars 2 is doing really well in China

BioWare will support Dragon Age: Inquisition multiplayer

BioWare will support Dragon Age: Inquisition multiplayer "far beyond Mass Effect 3"

Why id reworked Quake Live for newcomers:

Why id reworked Quake Live for newcomers: "We have often longed for a wider audience"

Magicka devs' Gauntlet reboot set for September 23 release

Magicka devs' Gauntlet reboot set for September 23 release

Valve release Left 4 Dead 2 assets to Source Filmmakers

Valve release Left 4 Dead 2 assets to Source Filmmakers

Topic of the Week: How do you play episodic games?

Topic of the Week

Topic of the Week: How do you play episodic games?

Quake Live gets a massive, newcomer-friendly update in anticipation of the Steam launch

Quake Live gets a massive, newcomer-friendly update in anticipation of the Steam launch

Supply drops are how you gear up in Call of Duty: Advanced Warfare multiplayer

Supply drops are how you gear up in Call of Duty: Advanced Warfare multiplayer

StarCrawlers makes dungeons out of spaceships

StarCrawlers makes dungeons out of spaceships

Escape Dead Island in November

Escape Dead Island in November