EA Origin had a vulnerability that left 300 million players potentially exposed

EA Origin had a vulnerability that left 300 million players potentially exposed

CATEGORIES:

first_img Share your voice EA Origin hosts games like NBA Live and Battlefield. Security researchers found a vulnerability that could have easily allowed for account takeovers. EA EA had to step up its game after researchers found an EA Origin vulnerability that could have exposed millions of people to account takeovers. The flaw exposed more than 300 million players on popular online games such as Battlefield, Madden NFL, NBA Live and FIFA, according to security researchers from Check Point and CyberInt. “EA’s Origin platform is hugely popular, and if left unpatched, these flaws would have enabled hackers to hijack and exploit millions of users’ accounts,” Oded Vanunu, head of products vulnerability research for Check Point, said in a statement Wednesday. The security flaw would have allowed hackers to hijack people’s accounts without stealing their login or passwords. That’s because it would steal a Single Sign-On authorization token instead, which could give complete control for hackers. Access tokens are an authentication method similar to passwords, as codes generated by services to keep you logged in. They’re harder to steal than passwords but still possible, as a similar vulnerability with Fortnite and Facebook demonstrated. As people become more aware of entering their passwords on suspicious websites, hackers have turned to stealing access tokens instead, which can be done in the background without any user participation. The security researchers were able to take control of an EA subdomain, under the URL “eaplayinvite.ea.com,” which was an inactive domain hosted on Microsoft’s Azure cloud service. CyberInt and Check Point’s researchers successfully requested to take over the inactive domain from Microsoft Azure and turned the page into a phishing trap. They could send the malicious page to players, and since it was an EA domain, victims would be more likely to trust the link, researchers said. The hijacked page had code embedded that would take access tokens intended for EA and direct it toward the researchers instead. “We had the vulnerabilities under control so no other party could have exploited them during the period it took EA to fix,” Alexander Peleg, CyberInt’s head of cyber operations, said in an email.The researchers could then use that to log into the victims’ accounts. CyberInt and Check Point said they reached out to EA to fix the flaw on Feb. 19, and the company said it fixed the issue within three weeks. “Protecting our players is our priority,” Adrian Stone, EA’s director of game and platform security, said in a statement provided by the security researchers. “As a result of the report from CyberInt and Check Point, we engaged our product security response process to remediate the reported issues.”EA didn’t respond to a request for additional comment. Comments Electronic Arts (EA) Microsoft Laptops Security Phones Tags 2last_img

LATEST POSTS

Makyn The Shot

first_imgMakyn The Shotlast_img

Quintyne, Campbelle overlooked for Pakistan series

first_imgST JOHN’S, Antigua (CMC): No room has been found for all-rounders Shaquana Quintyne and Shemaine Campbelle in a 13-member West Indies Women’s squad announced on Saturday for the one-day international (ODI) series against Pakistan starting later this month. The 19-year-old Quintyne, who captained Barbados to the regional 50-overs tournament in August, is one of five players failing to make the final cut, along with Campbelle, Chedean Nation, Karishma Ramharack and Vanessa Watts. Selectors had called up 18 players to the ongoing camp in St Lucia, which began last month. A leg-spinner and a capable right-handed batter, Quintyne has taken 26 wickets in 29 ODIs and 31 wickets from 33 Twenty20s, but has not suited up for West Indies in nearly a year. During the regional tournament, however, she was good enough to average 46, while taking four wickets. The 22-year-old Campbelle, meanwhile, is a seasoned campaigner, having played 61 ODIs and 68 T20s, since making her debut six years ago. She has a century – 105 against Sri Lanka two years ago – and has taken 21 wickets with her medium pace. The squad, which is led by new captain Stafanie Taylor, includes former skipper Merissa Aguilleira along with twins, Kycia and Kyshona Knight. The players will remain in camp, which started earlier this month in St Lucia, before facing Pakistan in the first of four day/night ODIs next Friday at the Beausejour Cricket Stadium. West Indies will also take on the Pakistanis in three T20s in Grenada, starting October 29. SQUAD: Stafanie Taylor (captain), Shakera Selman (vice-captain), Merissa Aguilleira, Shamilia Connell, Britney Cooper, Deandra Dottin, Afy Fletcher, Stacy-Ann King, Kycia Knight, Kyshona Knight, Hayley Matthews, Anisa Mohammed, Tremayne Smartt.last_img

Big clashes booked for FLOW Super Cup

first_imgDefending FLOW Super Cup champions Jamaica College (JC) will get their title defence under way against Vere Technical in a jam-packed opening weekend, spanning three venues and eight games.JC, which earlier this week suffered a penalty shoot-out loss to Wolmer’s Boys in the ISSA-FLOW Walker Cup competition, will be looking to ensure that they take better care of one of the three titles that they won last season along with the Manning Cup and Olivier Shield competitions, and will face a motivated Vere Technical at the National Stadium tomorrow at 6 p.m.That game will be preceded by Walker Cup semi-finalists St Jago’s showdown with St Elizabeth’s Lacovia High.DaCosta Cup champions Clarendon College were eliminated on penalties by last year’s beaten FLOW Super Cup finalists Holy Trinity in the first round of the competition and they will be desperate to have a bigger impact in the competition this year, when they play Hydel in the first of three games at Sabina Park at 2 p.m.Also at Sabina Park, Walker Cup finalists Wolmer’s Boys – semi-finalists last year – will play Port Antonio High at 4 p.m. with St George’s College, who also booked their spot in the Walker Cup final, will take their first stride in the tournament when they play Petersfield in the curtain-closer at 6 p.m.At Catherine Hall in Montego Bay, Glenmuir High will play Kingston College in the first of three games with a 2 p.m. kick-off, with St Elizabeth Technical facing Charlie Smith at 4 p.m. and local team St James High welcoming Excelsior High at 6 p.m.contested by 16 teamsThe second instalment of the FLOW Super Cup is being contested by 16 teams – eight each from the Manning and daCosta Cup competitions, with a $1-million jackpot and a new Italian-crafted trophy awaiting the eventual winners.Each team will get $25,000 for contesting the first round, and an additional $50,000 for advancing to the quarter-finals, with the four semi-finalists each set to receive another $100,000.Each finalist will be paid $200,000, with the winners pocketing a further $625,000 for a total cash prize of $1 million.The draw for this year’s FLOW Super Cup took place at the Creative Production and Training Centre yesterday.last_img

Under-20 Girlz bow out

first_imgJamaica’s Under-20 female footballers missed out on qualifying for the semi-finals of the CONCACAF Under-20 women championships despite slamming regional rivals, Trinidad and Tobago 6-1 in their final Group A game yesterday.The young Reggae Girlz needed group winners Canada to beat hosts Honduras by at least four clear goals to go through as second place qualifiers, as only the top two teams from the two groups advance to the last four.However, that game between Canada and Honduras ended 2-0 win for the Canadians and as a result the Hondurans secured second place from the group with four points, the same as Jamaica, but with a better goal difference than the Reggae Girlz.Oshay Nelson-Lawes netted a tournament equalling record for the most goals scored in a single match after finding the net four times in the Reggae Girlz’s victory. Khadija Shaw and Chanel Hudson-Marks got the other goals for Jamaica. Tsaianne Leander scored Trinidad’s lone goal.Canada ended the group with maximum nine points, while Trinidad and Tobago finished at the bottom without a point. The top three teams from the CONCACAF championship will qualify for the FIFA Under-20 Women’s World Cup.- L.S.last_img

Leave a Comment