The ReVuln team gave a presentation last week at the Black Hat security conference in Amsterdam. Apparently, getting someone to click on an "origin://" prefixed link is all it takes, as the Origin client then downloads a dynamic link library file to the victim's computer. The ReVuln team has also released a paper, detailing the exploit, which mentions a similar vulnerability discovered in Valve's Steam platform last year.
Speaking to Ars Technica, Electronic Arts says the company is aware of the issue, and seems to be addressing the problem in some manner.
"Our team is constantly investigating hypotheticals like this one as we continually update our security infrastructure", said an EA spokesperson.
Posted:
Source: http://au.ign.com/articles/2013/03/19/eas-origin-has-an-exploit-leaving-gamers-vulnerable-to-hackers
"EA's Origin Leaves Gamers Vulnerable to Hackers" :: Login/Create an Account :: 169 comments