Vulnerability in EA's origin platform left gamers exposed to attack

er557 · Jun 27, 2019

Checkpoint researchers verified the threat

מאות מיליוני גיימרים היו חשופים למתקפה

צ'ק פוינט וסייברינט גילו חולשות אבטחה בפלטפורמת המשחקים אוריג'ין של EA, שחשפה מאות מיליוני משתמשים לסכנת השתלטות. החולשות התגלו בתהליך הרישום באמצעות חשבונות ברשת החברתית. בצ'ק פוינט מתריעים: פלטפורמות רשת וענן הן יעדים מבוקשים של האקרים

translate.google.co.il

FordGT90Concept · Jun 27, 2019

The weaknesses identified in the process of registration and identification on the platform: a mistake in the user authentication methodology of entering the game through the details of his social networking accounts, led to the possibility that, after successful login and receive a unique identification Token attack possible by clicking the user on a dedicated link sent by the attacker.

So if you only used an EA/Origin account there's no problem?

er557 · Jun 27, 2019

I assume yes, no problem.

Cloud and web services are targeted a lot nowadays.

BorgOvermind · Jul 19, 2019

I kept receiving notifications by e-mail that I was logged into my EA account from various countries. I increased my password complexity from to a high level and then I received no more notifications.

System Name	future xeon II
Processor	DUAL SOCKET xeon e5 2686 v3 , 36c/72t, hacked all cores @3.5ghz, TDP limit hacked
Motherboard	asrock rack ep2c612 ws
Cooling	case fans,liquid corsair h100iv2 x2
Memory	96 gb ddr4 2133mhz gskill+corsair
Video Card(s)	2x 1080 sc acx3 SLI, @STOCK
Storage	Hp ex950 2tb nvme+ adata xpg sx8200 pro 1tb nvme+ sata ssd's+ spinners
Display(s)	philips 40" bdm4065uc 4k @60
Case	silverstone temjin tj07-b
Audio Device(s)	sb Z
Power Supply	corsair hx1200i
Mouse	corsair m95 16 buttons
Keyboard	microsoft internet keyboard pro
Software	windows 10 x64 1903 ,enterprise
Benchmark Scores	fire strike ultra- 10k time spy- 15k cpu z- 400/15000

System Name	BY-2021
Processor	AMD Ryzen 7 5800X (65w eco profile)
Motherboard	MSI B550 Gaming Plus
Cooling	Scythe Mugen (rev 5)
Memory	2 x Kingston HyperX DDR4-3200 32 GiB
Video Card(s)	AMD Radeon RX 7900 XT
Storage	Samsung 980 Pro, Seagate Exos X20 TB 7200 RPM
Display(s)	Nixeus NX-EDG274K (3840x2160@144 DP) + Samsung SyncMaster 906BW (1440x900@60 HDMI-DVI)
Case	Coolermaster HAF 932 w/ USB 3.0 5.25" bay + USB 3.2 (A+C) 3.5" bay
Audio Device(s)	Realtek ALC1150, Micca OriGen+
Power Supply	Enermax Platimax 850w
Mouse	Nixeus REVEL-X
Keyboard	Tesoro Excalibur
Software	Windows 10 Home 64-bit
Benchmark Scores	Faster than the tortoise; slower than the hare.

System Name	future xeon II
Processor	DUAL SOCKET xeon e5 2686 v3 , 36c/72t, hacked all cores @3.5ghz, TDP limit hacked
Motherboard	asrock rack ep2c612 ws
Cooling	case fans,liquid corsair h100iv2 x2
Memory	96 gb ddr4 2133mhz gskill+corsair
Video Card(s)	2x 1080 sc acx3 SLI, @STOCK
Storage	Hp ex950 2tb nvme+ adata xpg sx8200 pro 1tb nvme+ sata ssd's+ spinners
Display(s)	philips 40" bdm4065uc 4k @60
Case	silverstone temjin tj07-b
Audio Device(s)	sb Z
Power Supply	corsair hx1200i
Mouse	corsair m95 16 buttons
Keyboard	microsoft internet keyboard pro
Software	windows 10 x64 1903 ,enterprise
Benchmark Scores	fire strike ultra- 10k time spy- 15k cpu z- 400/15000

Vulnerability in EA's origin platform left gamers exposed to attack

er557

מאות מיליוני גיימרים היו חשופים למתקפה

FordGT90Concept

"I go fast!1!11!1!"

er557

BorgOvermind