EA Origin exploit lets hackers hijack your PC, technically | PCGamesN

Buzz Aldrin's Space Program Manager launches by aiming for the Moon

Playing With Myself: Salt

Tome: Immortal Arena is another MOBA, but it's doing away with a lot of genre mainstays

EA Origin exploit lets hackers hijack your PC, technically

ReVuln, the company who revealed a potential exploit within the Steam client last October, have done it again. This time they demonstrated in front of an audience at a Black Hat security conference in Amsterdam that hackers could easily hijack computers with EA’s Origin client installed. There are caveats, however.

"The Origin platform allows malicious users to exploit local vulnerabilities or features by abusing the Origin [Uniform Resource Identifiers] handling mechanism," ReVuln researchers Donato Ferrante and Luigi Auriemma say in their paper detailing the exploit they demonstrated. "In other words, an attacker can craft a malicious Internet link to execute malicious code remotely on [a] victim's system, which has Origin installed."

Essentially, what usually happens when you boot a game through Origin is that it connects to a web link to launch the game. All the hacker has to do to exploit this system is change the URL which Origin attempts to open when you boot a game. If that URL were changed to a site storing malware clicking on a Battlefield 3 server in EA’s Battlelog could inadvertently install malicious software on your computer.

Now, while this exploit has been spotted it isn’t the most convenient thing to arrange from the hacker’s point of view. For one thing, many browsers will still detect the illegal action being performed and ask that you confirm you want to go to such and such address. So long as you read the address that you are being directed to and it’s a legitimate EA URL then you should be fine. Also, there’s the question of how a hacker can get to your Origin client to alter its URLs, something ReVuln don’t go into. So, as per usual, make sure you have your antivirus software up-to-date and don't go to any sites that are clearly shifty. You know the ones.

Thanks, Ars Technica.

 

Login or Register
Alienware - Game VictoriousNvidia Shield - Titanfall
Playing With Myself: Salt

Salt

Playing With Myself: Salt

Buzz Aldrin's Space Program Manager launches by aiming for the Moon

Buzz Aldrin's Space Program Manager launches by aiming for the Moon

Tome: Immortal Arena is another MOBA, but it's doing away with a lot of genre mainstays

Tome: Immortal Arena is another MOBA, but it's doing away with a lot of genre mainstays

Watch four levels of Sneaky Sneaky, a stealthy dungeon adventure

Watch four levels of Sneaky Sneaky, a stealthy dungeon adventure

Ubisoft reveals what you'll need to drive around in The Crew

Ubisoft reveals what you'll need to drive around in The Crew

This War of Mine trailer shows the brutality of surviving

This War of Mine trailer shows the brutality of surviving

The best of the Steam Halloween Sale

Steam

The best of the Steam Halloween Sale

One Minute to Midnight lets you start a revolution for free

One Minute to Midnight lets you start a revolution for free

Hearthstone win trading results in permanent bans and tournament disqualification

Hearthstone win trading results in permanent bans and tournament disqualification

Watch Dogs sold 9m copies. Ubisoft expect to make €1.4bn by end of financial year

Watch Dogs sold 9m copies. Ubisoft expect to make €1.4bn by end of financial year

Battlecry trailer reveals a bloody Wild West in a weird Eastern Bloc

Battlecry trailer reveals a bloody Wild West in a weird Eastern Bloc

James Cameron calls VR “a yawn, frankly”

James Cameron calls VR “a yawn, frankly”

The Swindle is Spelunky meets Deus Ex, a stealth roguelike in a steampunk top hat

The Swindle

The Swindle is Spelunky meets Deus Ex, a stealth roguelike in a steampunk top hat

Prey 2 cancelled by Bethesda

Prey 2 cancelled by Bethesda

Far Cry 4's PvP will let you duke it out using armoured vehicles, magic animals and teleportation

Far Cry 4's PvP will let you duke it out using armoured vehicles, magic animals and teleportation

Survival management game This War of Mine gets a November release date and a gloomy trailer

Survival management game This War of Mine gets a November release date and a gloomy trailer

Hone your testicle shooting skills in Sniper Elite 3's free Shooting Range update

Hone your testicle shooting skills in Sniper Elite 3's free Shooting Range update

Call of Duty: Advanced Warfare's live action trailer is leaking testosterone all over the carpet

Call of Duty: Advanced Warfare's live action trailer is leaking testosterone all over the carpet

The 10 best World War 2 PC games

War Thunder

The 10 best World War 2 PC games

Techland's brought in a special kind of expert to help with Dying Light

Techland's brought in a special kind of expert to help with Dying Light

Alone in the Dark: Illumination and Haunted House: Cryptic Graves appear on Steam in time for Halloween

Alone in the Dark: Illumination and Haunted House: Cryptic Graves appear on Steam in time for Halloween

Assassin’s Creed Unity trailer transports our French Revolution assassin to WW2

Assassin’s Creed Unity trailer transports our French Revolution assassin to WW2

Shadow of Mordor DLC Lord of the Hunt detailed. Lead a ghul horde

Shadow of Mordor DLC Lord of the Hunt detailed. Lead a ghul horde