Hackers have managed to find a security hole in Google Pay's partnership with the online bank PayPal and are using it to make purchases products charging her unauthorized accounts internet banking.
Since last Friday, some users have reported seeing mysterious transactions appear in PayPal transaction history coming from their Google Pay account.
Τα προβλήματα αυτά έχουν αναφερθεί σε πολλές websites, such as the PayPal forums [1, 2, 3, 4, 5, 6, 7], on Reddit [1, 2], on Twitter, [1, 2], and in the Google Pay support forums at Germany and Russia [1, 2, 3, 4, 5, 6, 7, 8, 9, 10].
Victims report that hackers are using their Google Pay accounts to purchase products with linked PayPal accounts. According to the screenshots above, most of the transactions were made from online stores in the United States and especially from the stores Target.
Most of the victims appear to be German users.
The estimated losses amount to tens of thousands of euros, based on the above publications, since some transactions exceed 1.000 euros.
At the moment, PayPal is not aware of the security loophole exploited by hackers, but as he told ZDNet, they are reportedly investigating the matter.
"The security of our customers' accounts is a top priority for the company. We examine and evaluate all the information and we will take the appropriate measures that we deem necessary for the further protection of our customers ".