logo
  • Home
  • Gaming Videos
  • POE News
  • Gaming News
    • 4X/Other Space Sims
    • Elite: Dangerous
    • EVE Community
    • Mods and Cheats
    • MMORPGs
    • Neverwinter
    • Opinion
    • Previews
    • Reviews
    • Star Citizen
  • MMO Guides
    • Black Desert Online Guides
    • POE Guides
    • Path of Exile Builds
    • Teamfight Tactics
    • Warframe Guides
  • Free EVE Online Skill Points
Origin Exploit Threatens Accounts for Millions

Major Origin vulnerability threatened millions of users

Posted on: June 27, 2019 /
Categories: Gaming Videos, General Gaming News

The Origin service, digital distribution platform owned and operated by Electronic Arts, home to millions of accounts for gamers who want to play games like Battlefield, Apex Legends, Madden NFL, and FIFA. But with the release of a new exploit, there could have been serious trouble on the horizon, as any Origin user could have had their account on the service stolen without their knowledge.

For context, the service holds the games and personal details of more than 300 million users, this could have been a disastrous data breach had EA not been able to issue a patch. As of yet, no major reports of stolen information or accounts have been seen. And it’s not just EA that falls prey to this stuff, both Steam and GOG have had their own run-ins with security problems over the years.

The exploit itself is pretty complex, and involves a mix of hijacked domains, social engineering and malicious man-in-the-middle (MITM) attacks to hijack access to a given Origin account. It actually centers around a known and unpatched issue with Microsoft’s Azure cloud services, which host EA’s Origin content. The process goes like this:

  1. A user is tricked into clicking a link that leads to the Origin login page.
  2. That user submits login data, generating a valid login token.
  3. This single-sign-on (SSO) token is then forwarded to a hijacked subdomain on the EA site
  4. Attacker uses stolen SSO token to take control of the account.

Checkpoint Software researchers demonstrated the exploit in a video, which can be seen below.

ISKMogul Gaming

ISKMogul is a growing video game publication that got its start covering EVE Online, and has since expanded to cover a large number of topics and niches within the purview of gaming.

You Might Also Like:

  • Tomb Raider: Definitive Edition hits Xbox Game PassTomb Raider: Definitive Edition hits Xbox…
  • Ubisoft Pass leaks, suggesting an EA Access type service may be comingUbisoft Pass leaks, suggesting an EA…
  • EA E3 2018 conference live reportEA E3 2018 conference live report
  • IWantISK Deleting Unused AccountsIWantISK Deleting Unused Accounts
  • Inside Star Citizen video takes a look at Origin shipsInside Star Citizen video takes a look at…
  • Final Fantasy XIV free login campaign begins for lapsed subscribersFinal Fantasy XIV free login campaign…
  • Titanfall 3 No Longer In Development, Respawn ConfirmsTitanfall 3 No Longer In Development,…
  • Electronic Arts could be coming back to SteamElectronic Arts could be coming back to Steam
  • GOG Galaxy 2.0 announced, includes multi-platform supportGOG Galaxy 2.0 announced, includes…
  • Valve launches, then shutters, Steam.TV as a Twitch competitorValve launches, then shutters, Steam.TV as…
  • DLH Breach Exposes Millions of Steam KeysDLH Breach Exposes Millions of Steam Keys
  • Malware attacks poisons some indie games, infects tens of thousandsMalware attacks poisons some indie games,…
  • Steam Community access has been blocked in ChinaSteam Community access has been blocked in China
  • Microsoft leaks Xbox website security certificate - impersonation possibleMicrosoft leaks Xbox website security…
  • Remote code execution vulnerability found for Windows 7 and XPRemote code execution vulnerability found…
  • Anthem is now available on EA’s Origin AccessAnthem is now available on EA’s Origin Access

Tags: Electronic Arts, Hacking, Microsoft, Origin, Security, Vulnerability

Newest Posts

  • The EliminatorForza Horizon 4 launching battle royale mode, The Eliminator
    By ISKMogul Gaming
    December 11, 2019
  • Conquerors of the AtlasAtlas Strategies in Metamorph 3.9 and Conquerors of the Atlas
    By ISKMogul Gaming
    December 11, 2019
  • Warframe Rising TideHow To Farm Atmo Systems In Warframe
    By ISKMogul Gaming
    December 11, 2019
  • Tetris 99 Update Introduces Team Battle ModeTetris 99 Update Introduces Team Battle Mode
    By ISKMogul Gaming
    December 11, 2019
  • Payday 2Overkill has good and bad news about Payday 2 console port.
    By ISKMogul Gaming
    December 11, 2019
  • Nintendo Switch ConsoleNintendo sells 50K Switch units in one day in China
    By ISKMogul Gaming
    December 11, 2019

Most Popular Stories This Month

  • Path of Exile Blight Expansion Announced Path of Exile Blight Oils Guide Oils, the newest wrinkle for POE players to deal with i... posted on September 6, 2019
  • Path of Exile: Metamorph Path of Exile 3.9 and MetaMorph League Starter Builds Path of Exile 3.9 is almost here, so it's time to pick... posted on December 10, 2019
  • Path of Exile 2 Grinding Gear Games announces Path of Exile 4.0, or Path of Exile 2 Path of Exile 4.0 is finally here boys and girls. The w... posted on November 15, 2019
  • Path of Exile: Metamorph Path of Exile 3.9 and the MetaMorph League Details Check out our guide on Path of Exile's MetaMorph Challe... posted on November 15, 2019
  • The Outer Worlds Companion Gameplay Item Duplication Glitch Found for The Outer Worlds Dare I say it, but The Outer Worlds is the best thing O... posted on November 3, 2019
  • Path of Exile Blight Expansion Announced Blight League Guide: Mechanics Explained (POE Blight 3.8) Path of Exile 3.8 is upon us, and brings with it a new... posted on September 18, 2019

Recent Videos

  • The EliminatorForza Horizon 4 launching battle royale mode, The Eliminator
    By ISKMogul Gaming
  • Killing Floor 2Killing Floor 2’s Yuletide Horror is here
    By ISKMogul Gaming
  • Axiom Verge 2Axiom Verge 2 revealed for Nintendo Switch, out 2020
    By ISKMogul Gaming
  • Streets of Rage 4 AnnouncedAdam Hunter is back in Streets of Rage 4
    By ISKMogul Gaming
  • Overwatch Winter WonderlandOverwatch brings the holiday cheer with Winter Wonderland
    By ISKMogul Gaming

General Information

  • Advertising
  • Contact
  • Free EVE Online Trial with 1 Million Skill Points
  • Here are some helpful ways you can support us!
  • New Releases 2017/2018
  • Welcome to ISKMogul
  • Writers Wanted

Terms and Policy

  • Code of Ethics
  • Comment Policy
  • ISKMogul Cookie Policy
  • ISKMogul Privacy Policy and Legal Terms
  • Review Standards and Policy

Select a Date From The Archive

December 2019
MTWTFSS
« Nov  
 1
2345678
9101112131415
16171819202122
23242526272829
3031 

© 2019 • ISKMogul Adventures Game content and materials are trademarks and copyrights of their respective publisher and its licensors. All rights reserved.