EA Origin exploit lets hackers hijack your PC, technically | PCGamesN

EA Origin exploit lets hackers hijack your PC, technically

ReVuln, the company who revealed a potential exploit within the Steam client last October, have done it again. This time they demonstrated in front of an audience at a Black Hat security conference in Amsterdam that hackers could easily hijack computers with EA’s Origin client installed. There are caveats, however.

"The Origin platform allows malicious users to exploit local vulnerabilities or features by abusing the Origin [Uniform Resource Identifiers] handling mechanism," ReVuln researchers Donato Ferrante and Luigi Auriemma say in their paper detailing the exploit they demonstrated. "In other words, an attacker can craft a malicious Internet link to execute malicious code remotely on [a] victim's system, which has Origin installed."

Essentially, what usually happens when you boot a game through Origin is that it connects to a web link to launch the game. All the hacker has to do to exploit this system is change the URL which Origin attempts to open when you boot a game. If that URL were changed to a site storing malware clicking on a Battlefield 3 server in EA’s Battlelog could inadvertently install malicious software on your computer.

Now, while this exploit has been spotted it isn’t the most convenient thing to arrange from the hacker’s point of view. For one thing, many browsers will still detect the illegal action being performed and ask that you confirm you want to go to such and such address. So long as you read the address that you are being directed to and it’s a legitimate EA URL then you should be fine. Also, there’s the question of how a hacker can get to your Origin client to alter its URLs, something ReVuln don’t go into. So, as per usual, make sure you have your antivirus software up-to-date and don't go to any sites that are clearly shifty. You know the ones.

Thanks, Ars Technica.

 

Login or Register
Try these free to play games
?

These are affiliate links - clicking them and playing the games directly supports PCGamesN

Spotlight
?

Our Spotlight units plug content our journalists have made, that our advertisers want to promote. Sometimes the promotion is paid for, but the content they go to is always independent with no client oversight or approval.

Alienware - Game VictoriousTurtle Beach
Block 'n' Load is an unholy marriage of Minecraft and Team Fortress 2. And it's good

Block N Load

Block 'n' Load is an unholy marriage of Minecraft and Team Fortress 2. And it's good

Land of Legends: take in the ginormous new Riot campus

Land of Legends: take in the ginormous new Riot campus

Orcs Must Die! Unchained grows a MOBA-like levelling system and more

Orcs Must Die! Unchained grows a MOBA-like levelling system and more

Australian Government clears up geological myths spread by Minecraft:

Australian Government clears up geological myths spread by Minecraft: "Gold is not useful for pickaxes or armour"

Kerbal Space Program launch of launches will see it reach 1.0 on April 27th

Kerbal Space Program launch of launches will see it reach 1.0 on April 27th

Enigmas of The Evil Within explored today in The Consequence DLC

Enigmas of The Evil Within explored today in The Consequence DLC

Making it in Unreal: going Underground with the Descent reboot

Descent: Underground

Making it in Unreal: going Underground with the Descent reboot

Jack Attridge, Godus co-creator and Molyneux's protege, leaves 22Cans

Jack Attridge, Godus co-creator and Molyneux's protege, leaves 22Cans

WoW Tokens are on their way to Europe right now

WoW Tokens are on their way to Europe right now

With LCS victory over Unicorns of Love, Fnatic's League of Legends team complete their turnaround

With LCS victory over Unicorns of Love, Fnatic's League of Legends team complete their turnaround

Alan Wake 2 remains a (remote?) possibility, according to Remedy

Alan Wake 2 remains a (remote?) possibility, according to Remedy

Assassin's Creed Chronicles: China releases tomorrow, has an amazing trailer

Assassin's Creed Chronicles: China releases tomorrow, has an amazing trailer

The 20 best sandbox games on PC

Best sandbox games

The 20 best sandbox games on PC

A free Ronin demo jumps out of the shadows

A free Ronin demo jumps out of the shadows

Blood Bowl 2's Chaos team care less about the sport and more about maiming

Blood Bowl 2's Chaos team care less about the sport and more about maiming

AMD’s CEO lets slip Windows 10’s release date

AMD’s CEO lets slip Windows 10’s release date

Blizzard announce the Heroes of the Storm release date

Blizzard announce the Heroes of the Storm release date

Done the impossible: Firefly cast brought back together for Firefly Online

Done the impossible: Firefly cast brought back together for Firefly Online

Grand Theft Auto V PC review

Grand Theft Auto V

Grand Theft Auto V PC review

Joy to the Rimworld: latest update adds the need to please your colonists

Joy to the Rimworld: latest update adds the need to please your colonists

You can play as Mortal Kombat X’s non-playable characters on PC

You can play as Mortal Kombat X’s non-playable characters on PC

Have you enlisted in the Kerbal Mechwarrior Program?

Have you enlisted in the Kerbal Mechwarrior Program?

This Pillars of Eternity patch will get rid of the voices in your head

This Pillars of Eternity patch will get rid of the voices in your head

Heroes & Generals update adds the Forward Airfield assault map

Heroes & Generals update adds the Forward Airfield assault map