We’ve 1,000 keys for a Wildstar trial account. Want one?

Get clued up on the history of Warcraft while you wait for Warlords of Draenor

Obsidian are still "really interested" in doing a Knights of the Old Republic 3

EA Origin exploit lets hackers hijack your PC, technically

ReVuln, the company who revealed a potential exploit within the Steam client last October, have done it again. This time they demonstrated in front of an audience at a Black Hat security conference in Amsterdam that hackers could easily hijack computers with EA’s Origin client installed. There are caveats, however.

"The Origin platform allows malicious users to exploit local vulnerabilities or features by abusing the Origin [Uniform Resource Identifiers] handling mechanism," ReVuln researchers Donato Ferrante and Luigi Auriemma say in their paper detailing the exploit they demonstrated. "In other words, an attacker can craft a malicious Internet link to execute malicious code remotely on [a] victim's system, which has Origin installed."

Essentially, what usually happens when you boot a game through Origin is that it connects to a web link to launch the game. All the hacker has to do to exploit this system is change the URL which Origin attempts to open when you boot a game. If that URL were changed to a site storing malware clicking on a Battlefield 3 server in EA’s Battlelog could inadvertently install malicious software on your computer.

Now, while this exploit has been spotted it isn’t the most convenient thing to arrange from the hacker’s point of view. For one thing, many browsers will still detect the illegal action being performed and ask that you confirm you want to go to such and such address. So long as you read the address that you are being directed to and it’s a legitimate EA URL then you should be fine. Also, there’s the question of how a hacker can get to your Origin client to alter its URLs, something ReVuln don’t go into. So, as per usual, make sure you have your antivirus software up-to-date and don't go to any sites that are clearly shifty. You know the ones.

Thanks, Ars Technica.

 

Login or Register
Alienware - Game VictoriousNvidia Shield - Titanfall
We’ve 1,000 keys for a Wildstar trial account. Want one? thumbmail

Wildstar

We’ve 1,000 keys for a Wildstar trial account. Want one?

Get clued up on the history of Warcraft while you wait for Warlords of Draenor thumnnail

Get clued up on the history of Warcraft while you wait for Warlords of Draenor

Obsidian are still

Obsidian are still "really interested" in doing a Knights of the Old Republic 3

Now you Siege me: here's 36 minutes of Rainbow Six footage thumnnail

Now you Siege me: here's 36 minutes of Rainbow Six footage

Facepunch respond to Rust community ruckus, certainly

Facepunch respond to Rust community ruckus, certainly "haven't finished" development

Here's what BBC Newsnight made of Twitch thumnnail

Here's what BBC Newsnight made of Twitch

The Air-Raid Siren Song of War Thunder thumbmail

War Thunder

The Air-Raid Siren Song of War Thunder

GTA IV iCEnhancer modder driven away by peers

GTA IV iCEnhancer modder driven away by peers "spitting on me, my work, everything"

Ubisoft reveal the

Ubisoft reveal the "worlds apart" districts of Assassin's Creed Unity's Paris

Payday: The Heist will be free on October 18th during Crimefest thumnnail

Payday: The Heist will be free on October 18th during Crimefest

Elite: Dangerous standard beta begins next week; last chance to grab lifetime expansion pack  thumnnail

Elite: Dangerous standard beta begins next week; last chance to grab lifetime expansion pack

New Mass Effect details revealed at Comic-Con; Mako gets a facelift thumnnail

New Mass Effect details revealed at Comic-Con; Mako gets a facelift

All Keys Gone: We’ve 6,666 ArcheAge beta codes burning a hole in our hull thumbmail

ArcheAge

All Keys Gone: We’ve 6,666 ArcheAge beta codes burning a hole in our hull

Telltale confirms that there'll be a third season of The Walking Dead thumnnail

Telltale confirms that there'll be a third season of The Walking Dead

iCEnhancer 3.0 released for GTA 4 with a surreal launch trailer thumnnail

iCEnhancer 3.0 released for GTA 4 with a surreal launch trailer

DayZ update introduces loot persistence and improved cows thumnnail

DayZ update introduces loot persistence and improved cows

League of Legends tribunal study reveals 92.7% of summoners are punished thumnnail

League of Legends tribunal study reveals 92.7% of summoners are punished

How a quadriplegic ex-wrestler reached Gold in League of Legends thumbmail

League of Legends

How a quadriplegic ex-wrestler reached Gold in League of Legends

Blizzard's Korean Hearthstone ad wants you to join their

Blizzard's Korean Hearthstone ad wants you to join their "revolutionary fun creation"

CCP producer wants to empower EVE Online players and bring in new ones thumnnail

CCP producer wants to empower EVE Online players and bring in new ones

Something pew: Facepunch Studios is working on Riftlight, an arcade space shooter thumnnail

Something pew: Facepunch Studios is working on Riftlight, an arcade space shooter

Crysis averted: Crytek attributes recent problems to its transition from a developer to an online publisher  thumnnail

Crysis averted: Crytek attributes recent problems to its transition from a developer to an online publisher

Shadow Realms: BioWare teases a new game about losing your car keys thumnnail

Shadow Realms: BioWare teases a new game about losing your car keys