EA Origin exploit lets hackers hijack your PC, technically | PCGamesN

Magicka 2's new trailer explores the complex relationship between vampires and wizards

Dying Light first impressions

Valve confirms CS:GO match-fixing allegations, issues bans to seven players

EA Origin exploit lets hackers hijack your PC, technically

ReVuln, the company who revealed a potential exploit within the Steam client last October, have done it again. This time they demonstrated in front of an audience at a Black Hat security conference in Amsterdam that hackers could easily hijack computers with EA’s Origin client installed. There are caveats, however.

"The Origin platform allows malicious users to exploit local vulnerabilities or features by abusing the Origin [Uniform Resource Identifiers] handling mechanism," ReVuln researchers Donato Ferrante and Luigi Auriemma say in their paper detailing the exploit they demonstrated. "In other words, an attacker can craft a malicious Internet link to execute malicious code remotely on [a] victim's system, which has Origin installed."

Essentially, what usually happens when you boot a game through Origin is that it connects to a web link to launch the game. All the hacker has to do to exploit this system is change the URL which Origin attempts to open when you boot a game. If that URL were changed to a site storing malware clicking on a Battlefield 3 server in EA’s Battlelog could inadvertently install malicious software on your computer.

Now, while this exploit has been spotted it isn’t the most convenient thing to arrange from the hacker’s point of view. For one thing, many browsers will still detect the illegal action being performed and ask that you confirm you want to go to such and such address. So long as you read the address that you are being directed to and it’s a legitimate EA URL then you should be fine. Also, there’s the question of how a hacker can get to your Origin client to alter its URLs, something ReVuln don’t go into. So, as per usual, make sure you have your antivirus software up-to-date and don't go to any sites that are clearly shifty. You know the ones.

Thanks, Ars Technica.

 

Login or Register
Try these free to play games
?

These are affiliate links - clicking them and playing the games directly supports PCGamesN

Spotlight
?

Our Spotlight units plug content our journalists have made, that our advertisers want to promote. Sometimes the promotion is paid for, but the content they go to is always independent with no client oversight or approval.


Alienware - Game VictoriousTurtle Beach
Dying Light first impressions

Dying Light

Dying Light first impressions

Magicka 2's new trailer explores the complex relationship between vampires and wizards

Magicka 2's new trailer explores the complex relationship between vampires and wizards

Valve confirms CS:GO match-fixing allegations, issues bans to seven players

Valve confirms CS:GO match-fixing allegations, issues bans to seven players

Ubisoft is removing games purchased through unauthorised retailers from Uplay accounts

Ubisoft is removing games purchased through unauthorised retailers from Uplay accounts

CD Projekt RED will release 16 free DLC packs for The Witcher 3: Wild Hunt:

CD Projekt RED will release 16 free DLC packs for The Witcher 3: Wild Hunt: "We owe them"

Dragon's Dogma Online is a thing and will be free to play

Dragon's Dogma Online is a thing and will be free to play

Grey Goo PC review

Grey Goo

Grey Goo PC review

Frontier Developments lay-off fifteen staff, Coaster Park Tycoon announced

Frontier Developments lay-off fifteen staff, Coaster Park Tycoon announced

Valve’s economist has become Greece’s new Finance Minister. Fear the hat event horizon

Valve’s economist has become Greece’s new Finance Minister. Fear the hat event horizon

Kerbal Space Program will leave Early Access with the next update

Kerbal Space Program will leave Early Access with the next update

BioWare releases Dragon Age: Inquisition's catchy tavern songs for free

BioWare releases Dragon Age: Inquisition's catchy tavern songs for free

Big changes to StarCraft's Swarm Host in upcoming Balance Test Map

Big changes to StarCraft's Swarm Host in upcoming Balance Test Map

Topic of the Week: What do you look for in a remastered game?

Topic of the Week

Topic of the Week: What do you look for in a remastered game?

Gorgeous RPG strategy game Armello hits Early Access, discounted through the 29th

Gorgeous RPG strategy game Armello hits Early Access, discounted through the 29th

Fahrenheit: Indigo Prophecy Remastered is on its way, complete with awkward zombie sex

Fahrenheit: Indigo Prophecy Remastered is on its way, complete with awkward zombie sex

We’ve 650 Heroes of the Storm keys to give away. Form an orderly queue

We’ve 650 Heroes of the Storm keys to give away. Form an orderly queue

The Witcher 3: Wild Hunt hands on - playing 2015's most exciting RPG

The Witcher 3: Wild Hunt hands on - playing 2015's most exciting RPG

Aerobat is an absurdly fast-paced shmup with a drizzle of tactics

Aerobat is an absurdly fast-paced shmup with a drizzle of tactics

Grim Fandango Remastered PC review

Grim Fandango

Grim Fandango Remastered PC review

In Dead Synchronicity, you mutilate a dead vicar. And then it gets even bleaker

In Dead Synchronicity, you mutilate a dead vicar. And then it gets even bleaker

Gearbox are “ready to start” on Borderlands 3

Gearbox are “ready to start” on Borderlands 3

It’s official: Planetside 2 holds the Guinness World Record for biggest FPS battle in history

It’s official: Planetside 2 holds the Guinness World Record for biggest FPS battle in history

Homeworld Remastered Collection revealed; Steam launch set for February 25th

Homeworld Remastered Collection revealed; Steam launch set for February 25th

Adventures in... Assassin's Creed: Unity - Butcher, or Benny Hill?

Adventures in... Assassin's Creed: Unity - Butcher, or Benny Hill?