PayPal Two-Factor Authentication Broken

Lanier, whose team also created a proof-of-concept demonstrating how the bug could be exploited, says the worst-case scenario would be an attacker gaining access to a user's password, bypassing the second factor of authentication, and transferring money from the victim's account. "An attacker could use someone's credentials they got from a password dump" to bypass the second factor step in logging into the account, he says.

Click to expand...

Steve said:

It looks like PayPal is finally getting around to doing something about its broken two-factor authentication system.

Click to expand...