Security firms demonstrate subdomain hijack exploit vs. EA/Origin

guest · Jun 26, 2019

Security firms demonstrate subdomain hijack exploit vs. EA/Origin
Two security firms graphically demonstrate the danger of subdomain hijacking
June 26, 2019
https://arstechnica.com/information...nstrate-subdomain-hijack-exploit-vs-eaorigin/

Israeli security firms Check Point and CyberInt partnered up this week to find, exploit, and demonstrate a nasty security flaw that allows attackers to hijack player accounts in EA/Origin's online games. The exploit chains together several classic types of attack—phishing, session hijacking, and cross-site scripting—but the key flaw that makes the entire attack work is poorly maintained DNS.

What makes this attack different—and considerably more dangerous—is the attacker's possession of a site hosted at a valid, working subdomain of ea.com.
With the working subdomain, the attacker was able to harvest the authentication token from an existing, active EA session before exploiting it directly and in real time.

According to Alex and Oded, the kind of oversight made here by EA/Origin is depressingly common in large companies.
Click to expand...

Log in or Sign up

Security firms demonstrate subdomain hijack exploit vs. EA/Origin

guest Guest

Log in or Sign up

Security firms demonstrate subdomain hijack exploit vs. EA/Origin

guest Guest

Useful Searches