EA Origin exploit lets hackers hijack your PC, technically | PCGamesN

The 15 best space games on PC

Far Cry 4's "Escape from Durgesh Prison" DLC to hit in January; will feature perma-death

Strap in: the 2014 Steam Holiday Sale has officially launched; here's all the best offers

EA Origin exploit lets hackers hijack your PC, technically

ReVuln, the company who revealed a potential exploit within the Steam client last October, have done it again. This time they demonstrated in front of an audience at a Black Hat security conference in Amsterdam that hackers could easily hijack computers with EA’s Origin client installed. There are caveats, however.

"The Origin platform allows malicious users to exploit local vulnerabilities or features by abusing the Origin [Uniform Resource Identifiers] handling mechanism," ReVuln researchers Donato Ferrante and Luigi Auriemma say in their paper detailing the exploit they demonstrated. "In other words, an attacker can craft a malicious Internet link to execute malicious code remotely on [a] victim's system, which has Origin installed."

Essentially, what usually happens when you boot a game through Origin is that it connects to a web link to launch the game. All the hacker has to do to exploit this system is change the URL which Origin attempts to open when you boot a game. If that URL were changed to a site storing malware clicking on a Battlefield 3 server in EA’s Battlelog could inadvertently install malicious software on your computer.

Now, while this exploit has been spotted it isn’t the most convenient thing to arrange from the hacker’s point of view. For one thing, many browsers will still detect the illegal action being performed and ask that you confirm you want to go to such and such address. So long as you read the address that you are being directed to and it’s a legitimate EA URL then you should be fine. Also, there’s the question of how a hacker can get to your Origin client to alter its URLs, something ReVuln don’t go into. So, as per usual, make sure you have your antivirus software up-to-date and don't go to any sites that are clearly shifty. You know the ones.

Thanks, Ars Technica.

 

Login or Register

Alienware - Game VictoriousTurtle Beach
The 15 best space games on PC

15 best PC space games

The 15 best space games on PC

Far Cry 4's

Far Cry 4's "Escape from Durgesh Prison" DLC to hit in January; will feature perma-death

Hotline Miami 2: Wrong Number comitted to a 2015 release; also coming in vinyl form

Hotline Miami 2: Wrong Number comitted to a 2015 release; also coming in vinyl form

Evolve demonstrates new

Evolve demonstrates new "Wraith" monster with an interactive trailer

Planetside 2 update adds activatable knives and spitfire auto-turrets for engineers

Planetside 2 update adds activatable knives and spitfire auto-turrets for engineers

Prison Architect Alpha 28 declutters the interface and fixes wandering doctors

Prison Architect Alpha 28 declutters the interface and fixes wandering doctors

Strap in: the 2014 Steam Holiday Sale has officially launched; here's all the best offers

Steam

Strap in: the 2014 Steam Holiday Sale has officially launched; here's all the best offers

Minecraft: Story Mode is an episodic adventure series from Telltale Games

Minecraft: Story Mode is an episodic adventure series from Telltale Games

Toybox Turbos is getting third-person Oculus Rift mode that looks gorgeous

Toybox Turbos is getting third-person Oculus Rift mode that looks gorgeous

Verdun’s celebrating Christmas with a truce between the trenches

Verdun’s celebrating Christmas with a truce between the trenches

Deck 13 are in preproduction of Lords of the Fallen 2

Deck 13 are in preproduction of Lords of the Fallen 2

Depth’s Big Catch update pits you against a prehistoric shark

Depth’s Big Catch update pits you against a prehistoric shark

The 100 Best Minecraft Skins

Minecraft

The 100 Best Minecraft Skins

Wintersday returns to Guild Wars 2; help Toymaker Tixx spread some festive cheer

Wintersday returns to Guild Wars 2; help Toymaker Tixx spread some festive cheer

Give yourself a pat on the back: Humble Bundle has raised over $50 million dollars for charity

Give yourself a pat on the back: Humble Bundle has raised over $50 million dollars for charity

World of Warplanes gets invaded by giant snowmen and UFOs in new winter game mode

World of Warplanes gets invaded by giant snowmen and UFOs in new winter game mode

Brave the woes of This War of Mine in your own childhood treehouse with update 1.2

Brave the woes of This War of Mine in your own childhood treehouse with update 1.2

The best Dota 2 Heroes for beginners

The best Dota 2 Heroes for beginners

Topic of the Week: What games do you play on your laptop?

Topic of the Week

Topic of the Week: What games do you play on your laptop?

Saitek’s Farming Simulator controller is a racing wheel with knobs on. Actual knobs!

Saitek’s Farming Simulator controller is a racing wheel with knobs on. Actual knobs!

The Steam controller's design has been updated again. This time with a D Pad

The Steam controller's design has been updated again. This time with a D Pad

Trove’s Snowfest fills the voxel world with Christmas festivity

Trove’s Snowfest fills the voxel world with Christmas festivity

Grand Theft Auto 5 trailer shows multiplayer heists with big loot prizes

Grand Theft Auto 5 trailer shows multiplayer heists with big loot prizes

Steam gifts and trades from Russia have been stopped due to Ruble currency crash

Steam gifts and trades from Russia have been stopped due to Ruble currency crash