Don't play with matches: Riot clarifies its stance on third party applications in League of Legends

Diablo 3 patch 2.1.1 arrives, bringing big changes for gamblers

Big Pharma is a colourful tycoon game that explores an ugly industry

EA Origin exploit lets hackers hijack your PC, technically

ReVuln, the company who revealed a potential exploit within the Steam client last October, have done it again. This time they demonstrated in front of an audience at a Black Hat security conference in Amsterdam that hackers could easily hijack computers with EA’s Origin client installed. There are caveats, however.

"The Origin platform allows malicious users to exploit local vulnerabilities or features by abusing the Origin [Uniform Resource Identifiers] handling mechanism," ReVuln researchers Donato Ferrante and Luigi Auriemma say in their paper detailing the exploit they demonstrated. "In other words, an attacker can craft a malicious Internet link to execute malicious code remotely on [a] victim's system, which has Origin installed."

Essentially, what usually happens when you boot a game through Origin is that it connects to a web link to launch the game. All the hacker has to do to exploit this system is change the URL which Origin attempts to open when you boot a game. If that URL were changed to a site storing malware clicking on a Battlefield 3 server in EA’s Battlelog could inadvertently install malicious software on your computer.

Now, while this exploit has been spotted it isn’t the most convenient thing to arrange from the hacker’s point of view. For one thing, many browsers will still detect the illegal action being performed and ask that you confirm you want to go to such and such address. So long as you read the address that you are being directed to and it’s a legitimate EA URL then you should be fine. Also, there’s the question of how a hacker can get to your Origin client to alter its URLs, something ReVuln don’t go into. So, as per usual, make sure you have your antivirus software up-to-date and don't go to any sites that are clearly shifty. You know the ones.

Thanks, Ars Technica.

 

Login or Register
Alienware - Game VictoriousNvidia Shield - Titanfall
Topic of the Week: What are your best co-op moments?

Topic of the Week

Topic of the Week: What are your best co-op moments?

Don't play with matches: Riot clarifies its stance on third party applications in League of Legends

Don't play with matches: Riot clarifies its stance on third party applications in League of Legends

Diablo 3 patch 2.1.1 arrives, bringing big changes for gamblers

Diablo 3 patch 2.1.1 arrives, bringing big changes for gamblers

Big Pharma is a colourful tycoon game that explores an ugly industry

Big Pharma is a colourful tycoon game that explores an ugly industry

Counter-Strike Nexon: Zombies open beta begins today and rewards testers with free stuff

Counter-Strike Nexon: Zombies open beta begins today and rewards testers with free stuff

Blizzard cancels Titan:

Blizzard cancels Titan: "We didn't find the fun"

Wasteland 2 review

Wasteland 2 Digital Deluxe Edition

Wasteland 2 review

Green Man Gaming to give away Eve trials with pre-orders of Far Cry 4 and more

Green Man Gaming to give away Eve trials with pre-orders of Far Cry 4 and more

Lords of the Fallen footage showcases mid-game boss fights and the

Lords of the Fallen footage showcases mid-game boss fights and the "medieval BFG"

Richard Garriott's Shroud of the Avatar greenlit in short order

Richard Garriott's Shroud of the Avatar greenlit in short order

Trion lower ArcheAge subscription price after community kerfuffle

Trion lower ArcheAge subscription price after community kerfuffle

Blitzkrieg 3 will be the RTS antidote to

Blitzkrieg 3 will be the RTS antidote to "today's rapid pace of life"

ArcheAge review in progress

ArcheAge

ArcheAge review in progress

Steam front page gets personal with launch of new discovery features and Curators

Steam front page gets personal with launch of new discovery features and Curators

Triad Wars is an online crime simulator -

Triad Wars is an online crime simulator - "the flipside of Sleeping Dogs"

Steam active userbase doubles in two years to 100 million

Steam active userbase doubles in two years to 100 million

Pathologic remake trailer is appropriately discomforting

Pathologic remake trailer is appropriately discomforting

Metal Gear Solid 5: The Phantom Pain is vastly improved by an adorable canine mascot

Metal Gear Solid 5: The Phantom Pain is vastly improved by an adorable canine mascot

Nvidia: “Titan sold way above our expectations”

Nvidia

Nvidia: “Titan sold way above our expectations”

Runescape's Lost City of the Elves has been found - it's always in the last place that you look

Runescape's Lost City of the Elves has been found - it's always in the last place that you look

Assassin's Creed Unity DLC finally takes us to China on a quest for revenge

Assassin's Creed Unity DLC finally takes us to China on a quest for revenge

Stronghold Crusader 2 launches (a sack of diseased camel heads over your castle wall) tomorrow

Stronghold Crusader 2 launches (a sack of diseased camel heads over your castle wall) tomorrow

Tim Schafer explains why Spacebase DF-9 is being flung out the airlock early

Tim Schafer explains why Spacebase DF-9 is being flung out the airlock early

John Carmack on what the Oculus Rift's integrated audio can do for gaming

John Carmack on what the Oculus Rift's integrated audio can do for gaming