Esportsify wants to make the business of eSports easier

This is what a 100-player game of Galactic Civilizations 3 looks like

Now that's a reveal: Capcom are making a Resident Evil: Revelations 2

EA Origin exploit lets hackers hijack your PC, technically

ReVuln, the company who revealed a potential exploit within the Steam client last October, have done it again. This time they demonstrated in front of an audience at a Black Hat security conference in Amsterdam that hackers could easily hijack computers with EA’s Origin client installed. There are caveats, however.

"The Origin platform allows malicious users to exploit local vulnerabilities or features by abusing the Origin [Uniform Resource Identifiers] handling mechanism," ReVuln researchers Donato Ferrante and Luigi Auriemma say in their paper detailing the exploit they demonstrated. "In other words, an attacker can craft a malicious Internet link to execute malicious code remotely on [a] victim's system, which has Origin installed."

Essentially, what usually happens when you boot a game through Origin is that it connects to a web link to launch the game. All the hacker has to do to exploit this system is change the URL which Origin attempts to open when you boot a game. If that URL were changed to a site storing malware clicking on a Battlefield 3 server in EA’s Battlelog could inadvertently install malicious software on your computer.

Now, while this exploit has been spotted it isn’t the most convenient thing to arrange from the hacker’s point of view. For one thing, many browsers will still detect the illegal action being performed and ask that you confirm you want to go to such and such address. So long as you read the address that you are being directed to and it’s a legitimate EA URL then you should be fine. Also, there’s the question of how a hacker can get to your Origin client to alter its URLs, something ReVuln don’t go into. So, as per usual, make sure you have your antivirus software up-to-date and don't go to any sites that are clearly shifty. You know the ones.

Thanks, Ars Technica.

 

Login or Register
Alienware - Game VictoriousNvidia Shield - Titanfall
Esportsify wants to make the business of eSports easier

Esports

Esportsify wants to make the business of eSports easier

This is what a 100-player game of Galactic Civilizations 3 looks like

This is what a 100-player game of Galactic Civilizations 3 looks like

Now that's a reveal: Capcom are making a Resident Evil: Revelations 2

Now that's a reveal: Capcom are making a Resident Evil: Revelations 2

Korea's game rating board halts microtransactions in all Facebook games

Korea's game rating board halts microtransactions in all Facebook games

Riot's plan to ensure relegated LCS teams

Riot's plan to ensure relegated LCS teams "don't just disappear from the business"

Ataarrghi: Alone in the Dark and Haunted House reboots due on PC this Autumn

Ataarrghi: Alone in the Dark and Haunted House reboots due on PC this Autumn

EA are giving Shadow Realm’s team “the ability to fail”

Shadow Realms

EA are giving Shadow Realm’s team “the ability to fail”

Ubisoft will release three open-world games in the space of eight days

Ubisoft will release three open-world games in the space of eight days

Blizzard plan to still be working on Hearthstone in ten years' time

Blizzard plan to still be working on Hearthstone in ten years' time

You can pre-load The Sims 4 on Origin this week

You can pre-load The Sims 4 on Origin this week

Campo Santo reveal first trailer for Firewatch at PAX

Campo Santo reveal first trailer for Firewatch at PAX

Icewind Dale: Enhanced Edition announced by Beamdog at PAX 2014

Icewind Dale: Enhanced Edition announced by Beamdog at PAX 2014

Shadow Realms is Left 4 Dead by way of pen and paper RPGs

Shadow Realms

Shadow Realms is Left 4 Dead by way of pen and paper RPGs

Rockstar is updating Grand Theft Auto V’s soundtrack for PC release

Rockstar is updating Grand Theft Auto V’s soundtrack for PC release

Super Meat Boy: Forever revealed; is like the original

Super Meat Boy: Forever revealed; is like the original "without the use of multiple buttons"

Meet Ratbag, Middle-earth: Shadow of Mordor’s sniveling orc informant

Meet Ratbag, Middle-earth: Shadow of Mordor’s sniveling orc informant

Blizzard has

Blizzard has "six or seven" World of Warcraft expansions planned; "easily 10 years worth of stuff"

Facepunch Studios announce Arcade: want to

Facepunch Studios announce Arcade: want to "let players design their own arcades"

The Journey Down: Chapter Two review

The Journey Down: Chapter Two

The Journey Down: Chapter Two review

ArcheAge gets a release date: launches September 16th

ArcheAge gets a release date: launches September 16th

Dota 2 to receive long awaited Techies update next week; we're all doomed

Dota 2 to receive long awaited Techies update next week; we're all doomed

GoD Factory: Wingmen launches on Steam, brightening up the galaxy

GoD Factory: Wingmen launches on Steam, brightening up the galaxy

Saints Row: Gat Out of Hell pits the gang against Satan

Saints Row: Gat Out of Hell pits the gang against Satan

Maia 0.44 ramps up the danger with catastrophic earthquakes and suspicious aliens

Maia 0.44 ramps up the danger with catastrophic earthquakes and suspicious aliens