Forum Discussion

EA_Kuba's avatar
EA_Kuba
Icon for Community Manager rankCommunity Manager
1 month ago

EA Forums Online Security Newsletter - Volume 7/ 2026

Hello everyone, and welcome to Season 3 of the EA Forums Online Security Newsletter!

In our previous edition, we explored account recovery and the steps players can take when they lose access to an account. You can revisit that discussion at any time, especially if you would like to share additional advice or experiences with the community.

This month, we are looking at malware, malicious software that can steal information, damage files, interfere with your computer, or give someone else access to your device. For gamers, an infection can put much more than the computer itself at risk. Saved passwords, email accounts, gaming accounts, payment information, and valuable in-game content may all be exposed.

The new season marks the point where you pick a new class for Season 3. Head over to the Season Registration Form and pick one of the remaining classes you have not yet picked in the previous season. If you can't remember which ones you've picked already, you can check them on the Leaderboard. Remember that the class you pick dictates the tasks you need to perform to claim points for the newsletter ranked version. 

Malware is a broad term for harmful software, including viruses, spyware, ransomware, information stealers, and other unwanted programs. Different types of malware behave differently, but they share one purpose: performing actions on your device that you did not knowingly approve. Some infections are obvious, while others are specifically designed to remain hidden for as long as possible.

Gamers can be attractive targets because their computers may contain stored account credentials, payment details, browser sessions, and access to inventories or accounts with real-world value. An information-stealing infection may search browsers and applications for passwords, cookies, and other data that can help an attacker bypass the normal sign-in process. This means an account can sometimes be compromised even when its password was not directly guessed.

One of the biggest warning signs is unexpected behaviour. Your computer may become noticeably slower, fans may run at high speed even when no demanding programs are open, unfamiliar applications may appear, or browser settings may change without your permission. You might also see repeated security warnings, unexplained pop-ups, disabled protection settings, unexpected account sign-ins, or messages sent from your accounts that you did not write. However, malware does not always create visible symptoms, so the absence of unusual behaviour does not guarantee that a device is clean.

Cracked games, unofficial activators, cheats, key generators, and pirated software are particularly dangerous download categories. These files usually require players to ignore browser warnings, disable antivirus protection, add security exclusions, or run programs with administrator access. Those instructions should be treated as major warning signs. Cybercriminals can exploit the promise of a free game or a paid feature to convince someone to disable the very protections that would normally prevent infection. Microsoft has documented malware campaigns involving deceptive download pages and has warned that non-genuine software can expose users to serious security risks.

The safest approach is simple: download games, updates, launchers, mods, and utilities only from official or trusted sources. Do not download cracked versions of games, repacks, unofficial activation tools, or files claiming to bypass licences or anti-cheat protections. A download being popular, highly rated, or recommended in a video does not prove that it is safe. Malicious files can be repackaged, renamed, or promoted through compromised accounts and misleading search results.

If you believe your computer may be infected, stop signing in to important services from that device until it has been checked. Update your security software, run a full system scan, and review any items detected or quarantined. Windows Security provides quick, full, custom, and Microsoft Defender Offline scan options. The offline scan restarts the computer and checks it before Windows fully loads, making it more difficult for persistent malware to hide or defend itself.

Remove suspicious programs and browser extensions, install available operating-system and application updates, and restart the computer when instructed by the security tool. If malware continues to return, security tools cannot complete their scans, or important system settings remain disabled, seek assistance from a trusted computer professional. In serious cases, completely reinstalling the operating system may be safer than assuming every part of a deeply infected system has been repaired.

Cleaning the computer is only part of the recovery process. Once you are confident that you are using a clean device, change the password for your email account first, followed by your gaming, social, shopping, and financial accounts. Use unique passwords, review recent sign-ins, sign out of unfamiliar sessions, remove unknown connected applications, and enable app-based two-factor authentication wherever available. Otherwise, an attacker may continue using information or active sessions stolen before the malware was removed.

Security features built into the operating system also provide an important layer of defence. For example, Secure Boot helps ensure that a Windows PC loads trusted software during startup. Some EA games require it to support EA Javelin Anticheat and help create a safer playing environment. Secure Boot is not a replacement for antivirus software or careful download habits, but it forms part of a wider approach in which the operating system, security tools, account protections, and player decisions work together.

The most effective defence begins before anything is downloaded. Pause when a website asks you to disable security software, ignore warnings, execute an unfamiliar file, or grant administrator permission. A free game, cheat, or crack is never worth losing access to your accounts—or giving a stranger control of your computer.

How to use Secure Boot on your PC
https://help.ea.com/en/articles/technical-issues/secure-boot/

Virus and threat protection in Windows Security
https://support.microsoft.com/en-US/Windows/Security/threat-malware-protection/virus-and-threat-protection-in-the-windows-security-app

Microsoft guidance for detecting and removing malware
https://support.microsoft.com/en-us/defender/troubleshoot-problems-with-detecting-and-removing-malware

Getting started with anti-malware in Microsoft Defender
https://support.microsoft.com/en-us/defender/getting-started-with-anti-malware-in-microsoft-defender

EA Forums Online Security Newsletter Badge Handbook
https://forums.ea.com/discussions/ea-forums-general-discussion-en/ea-forums-online-security-newsletter-badge-handbook/13148877 

In the previous edition, we asked you to share why account recovery can fail and what players should do before contacting support. This month’s highlighted contributions were selected for their practical value, personal insight, and ability to help other players prepare before an account problem occurs.

Preparing Before an Emergency

Author:  ORANGE-EXPRESS​ 

“Losing access to a primary email address is indeed one of the biggest infrastructure barriers to smooth account recovery. This newsletter serves as a great checklist for all players to audit their settings—such as updating recovery phone numbers, checking trusted devices, and safely storing backup codes—before any trouble happens.”

Recognized for:

  • Emphasizing prevention rather than waiting for an account lockout
  • Encouraging players to review trusted devices and backup codes

Lessons From a Difficult Recovery

Author:  Ellupelluellu​ 

“Of course the email I had created it with was old and not active. Old phone numbers were not valid anymore, and the secondary email I had used for recovery was long gone too.”

Ellupelluellu also reminded players to try official recovery options first, check whether a linked account can be used to sign in, prepare detailed information before contacting support, and use only official support channels.

Highlighted for:

  • Sharing a relatable example of how recovery details become outdated over time
  • Showing how several small oversights can combine into a serious problem

Preparing the Information Support Needs

Author: NoikaSims​ 

“Check the state of the account. Prepare all the information that support can ask you for the recovery. Contact official support. Give them the information required to recover your account.”

Recognized for:

  • Presenting the recovery process in a simple and logical order
  • Reminding players to gather information before opening a support case

Thank you to everyone who read the previous edition and shared advice, personal experiences, and encouragement with the community. Your contributions help turn each newsletter into a practical resource for other players.

EA Forums Online Security Newsletter - Volume 7 / 2026

19 Replies

  • [Infrastructure Analysis: Session Hijacking vs. Javelin Ring 0 Integrity]
    Thank you for opening this volume, EA_Kuba! This edition hits the core of modern PC gaming infrastructure by focusing on how modern malware bypasses basic security. Cybercriminals no longer just guess passwords; they leverage non-genuine software to hijack active browser sessions and authentication cookies, completely evading standard sign-in protections.As a Cipher class analyst, I highly value the emphasis on Secure Boot. Since kernel-level components like EA Javelin Anticheat operate at Ring 0 to maintain a fair play baseline, ensuring that the initial boot sequence is completely uncompromised is our ultimate proactive defense. This high-level technical dialogue is exactly what our community needs to protect our libraries. Ready to monitor the upcoming tasks!

    I’d like to share this topic on social media—after all, safety comes first. Plus, I want to get more people involved with the EA Forums!

  • I'm a bit late to the party - but I'd liketo thank you for another informative newsletter. 

  • [The Core Baseline of Javelin Integrity: Genuine OS Environment]

    Regarding the technical inquiries and background conflicts discussed in this volume, we must emphasize the absolute baseline of OS integrity. Javelin’s kernel-level verification is fundamentally designed to cross-reference and validate the official digital signatures of a pristine operating system.If players are utilizing non-genuine, cracked, or heavily modified Windows environments, the security handshake will inevitably fail, resulting in persistent launch errors. The ultimate solution is simple: ensure a 100% genuine and unaltered Windows installation with factory-certified Secure Boot keys. This foundational compliance resolves the root infrastructure deadlocks before troubleshooting peripheral applications. Safety and fair play always begin with a clean system architecture!

  • Thank you for this volume, EA_Kuba​ ! 
    An essential lesson, both for preventing and recovering from malware.

    Congratulations to ORANGE-EXPRESS​ , Ellupelluellu​  and NoikaSims​ their contributions to the previous volume. 

    ORANGE-EXPRESS​ -  thank you very much for your useful and concise "lessons" on EA Javelin Anticheat.

    Ellupelluellu​  - I really liked your Malware Recovery Checklist.
    By the way, it's great that it was the mouse and not malware.

    rosemow​ - Excellent identification of warning signs of a dangerous game download.

    Malware can steal access to your accounts without your password by stealing active credentials, intercepting data, or cloning your digital identity.

    The methods commonly used are:

    1. Session Hijacking: Malware copies your browser's login files and sends them to the attacker, who clones your session in their own browser and directly accesses your account, even bypassing two-step verification (2FA).
    2. Keylogging: Malware secretly records every letter you type when you log in and sends it to the attacker.
    3.  Overlay Attacks: Malware detects that you open a legitimate application (such as your bank or social network app) and draws an identical fake screen over the real app, tricking you into entering your information.
    4.  Database extraction: The malware searches for and decrypts the list of passwords stored in your web browser's memory (Chrome, Edge, Firefox), which saves your passwords in local databases on your hard drive.
    5.  Authentication token hijacking (OAuth): Apps use servers that generate a secret code (token) when you successfully log in. The malware searches for this code within your device's files, copies it, and sends it to the attacker, who uses that code on their own computer to directly access your account.

     

  • ORANGE-EXPRESS's avatar
    ORANGE-EXPRESS
    Seasoned Ace
    1 month ago

    Thank you for this excellent checklist. As part of raising awareness, it is important to read through these points before running into trouble. Additionally, adopting biometrics and passkeys will help protect your accounts across PCs, smartphones, and tablets.

  • Thank you for the lesson about malware 😊

    Regarding the task of sentinel, if a player discover malware on their device:

    1. Disconect it from internet and close the active sessions.
    2. Run a full system scan with their security software or perform a secure boot if necessary and seek for professional assistance if the malware returns. In some cases, reinstalling the operating system it is better than remain unsure whether everything has been completely removed.
    3. Secure their accounts from a clean device if possible, otherwise, once their device is clean, secure the accounts changing the passwords (email first), remove unknown applications, enable app-based two-factor-authenticator and log out of "all devices" from your account control panels.

     

  • Warning signs of a dangerous game download might be requirements to  ignore browser warnings, disable antivirus protection, add security exclusions, or run programs with administrator access. 

    Best is to download games only from official sources.

Featured Places

Node avatar for EA Community Discussion

EA Community Discussion

Looking for a place to post? If your topic doesn’t fit in a specific game forum - whether it’s about EA accounts, general questions, or brainstorming ideas - this is the spot!Latest Activity: 1 hour ago
5,393 Posts