EA Origin exploit lets hackers hijack your PC, technically | PCGamesN

EA Origin exploit lets hackers hijack your PC, technically

ReVuln, the company who revealed a potential exploit within the Steam client last October, have done it again. This time they demonstrated in front of an audience at a Black Hat security conference in Amsterdam that hackers could easily hijack computers with EA’s Origin client installed. There are caveats, however.

"The Origin platform allows malicious users to exploit local vulnerabilities or features by abusing the Origin [Uniform Resource Identifiers] handling mechanism," ReVuln researchers Donato Ferrante and Luigi Auriemma say in their paper detailing the exploit they demonstrated. "In other words, an attacker can craft a malicious Internet link to execute malicious code remotely on [a] victim's system, which has Origin installed."

Essentially, what usually happens when you boot a game through Origin is that it connects to a web link to launch the game. All the hacker has to do to exploit this system is change the URL which Origin attempts to open when you boot a game. If that URL were changed to a site storing malware clicking on a Battlefield 3 server in EA’s Battlelog could inadvertently install malicious software on your computer.

Now, while this exploit has been spotted it isn’t the most convenient thing to arrange from the hacker’s point of view. For one thing, many browsers will still detect the illegal action being performed and ask that you confirm you want to go to such and such address. So long as you read the address that you are being directed to and it’s a legitimate EA URL then you should be fine. Also, there’s the question of how a hacker can get to your Origin client to alter its URLs, something ReVuln don’t go into. So, as per usual, make sure you have your antivirus software up-to-date and don't go to any sites that are clearly shifty. You know the ones.

Thanks, Ars Technica.

 

Login or Register
Try these free to play games
?

These are affiliate links - clicking them and playing the games directly supports PCGamesN

Spotlight
?

Our Spotlight units plug content our journalists have made, that our advertisers want to promote. Sometimes the promotion is paid for, but the content they go to is always independent with no client oversight or approval.

Alienware - Game VictoriousTurtle Beach
Final Fantasy XIV new player guide

FINAL FANTASY® XIV: A Realm Reborn™

Final Fantasy XIV new player guide

Smite expands its Hindu pantheon with Ravana, The Demon King of Lanka

Smite expands its Hindu pantheon with Ravana, The Demon King of Lanka

Report: Warner Bros. knew about the Arkham Knight PC problems months ago, sources claim

Report: Warner Bros. knew about the Arkham Knight PC problems months ago, sources claim

Diablo's Eternal Conflict comes to Heroes of the Storm

Diablo's Eternal Conflict comes to Heroes of the Storm

Wargame publisher Slitherine and BAE Systems, the defence contractor, join forces

Wargame publisher Slitherine and BAE Systems, the defence contractor, join forces

V.Next is an episodic stealth adventure that will release weekly

V.Next is an episodic stealth adventure that will release weekly

Path of Exile: The Awakening gets out of bed July 10, includes 2 new challenge leagues

Path of Exile

Path of Exile: The Awakening gets out of bed July 10, includes 2 new challenge leagues

Why Starcraft 2 doesn't get balanced like a MOBA

Why Starcraft 2 doesn't get balanced like a MOBA

Lorne Lanning on VR: a lot of developers “are in lala land”

Lorne Lanning on VR: a lot of developers “are in lala land”

Here’s what happens when Apple bans your game on the App store

Here’s what happens when Apple bans your game on the App store

Kerbal Space Program launches new official Asteroid Day mod

Kerbal Space Program launches new official Asteroid Day mod

Orcs Must Die! Unchained closed beta updates PvE

Orcs Must Die! Unchained closed beta updates PvE

The 10 best racing games on PC

Burnout Paradise

The 10 best racing games on PC

Minecraft has now sold over 20 million copies on PC

Minecraft has now sold over 20 million copies on PC

Dirt Rally picks up 12 new stages in Tarmac Terror update

Dirt Rally picks up 12 new stages in Tarmac Terror update

Star Citizen FPS module hits delays

Star Citizen FPS module hits delays

Civilization: Beyond Earth – Rising Tide is a wet expansion with a dry trailer

Civilization: Beyond Earth – Rising Tide is a wet expansion with a dry trailer

Meat Feast: Blizzard introduces The Butcher, Heroes of the Storm's new Assassin

Meat Feast: Blizzard introduces The Butcher, Heroes of the Storm's new Assassin

Devilian is Trion's Diablo inspired MMO, with a devilish twist

Devilian

Devilian is Trion's Diablo inspired MMO, with a devilish twist

Her Story PC review

Her Story PC review

Mojang launch Minecraft in Education initiative to connect teachers and players

Mojang launch Minecraft in Education initiative to connect teachers and players

Unity boss predicts how app store rivalries will play out

Unity boss predicts how app store rivalries will play out

Unity on the future of VR controls:

Unity on the future of VR controls: "Everything we did on a desktop no longer works"

Rebellion to remaster 1998 Battlezone:

Rebellion to remaster 1998 Battlezone: "Whichever vision you love, you've not been forgotten"