Hackers managed to find a security loophole in his collaboration Google Pay to online PayPal bank and use it to buy products by charging unauthorized accounts internet banking.
Since last Friday, some users have reported seeing mysterious transactions appear in PayPal transaction history coming from their Google Pay account.
These problems have been reported on many websites, such as PayPal forums [1, 2, 3, 4, 5, 6, 7], on Reddit [1, 2], on Twitter, [1, 2], and in the Google Pay support forums at Germany and Russia [1, 2, 3, 4, 5, 6, 7, 8, 9, 10].
The victims report that hackers use Google Pay accounts to buy products with linked PayPal accounts. According to the screenshots above, most of the transactions were made from online stores in the United States and especially from Target stores.
Most of the victims appear to be German users.
The estimated losses amount to tens of thousands of euros, based on the above publications, since some transactions exceed 1.000 euros.
At the moment, PayPal is not aware of the security loophole exploited by hackers, but as he told ZDNet, they are reportedly investigating the matter.
"The security of our customers' accounts is top notch priority for the company. We are reviewing and evaluating all information and will take the appropriate measures we deem necessary to further protect our customers."
