"An attacker can craft a malicious internet link to execute malicious code remotely on victim's system, which has Origin installed, " wrote the researchers in a paper detailing their work.
In lab experiments, the researchers exploited a loophole in the way Origin handles links to games users have downloaded and installed to make it run code that compromised a target machine.