4 ms·
From looking at the Reddit "master thread", everybody reporting they were hacked reports 2FA disabled. Everybody reporting no hack reports 2FA enabled. Sounds
by galadran 10y ago
From looking at the Reddit "master thread", everybody reporting they were hacked reports 2FA disabled. Everybody reporting no hack reports 2FA enabled.
Sounds like reused passwords!
- jessaustin 10y agoTFA has 2FA hacks: "They remote connected in at 5AM MT, went into my Chrome and used my PayPal to buy about $3k worth of gift cards. And yes, I had two-factor authentication."
- ryanl0l 10y agoOn paypal or TV? Needs clarification.
- jessaustin 10y agoTFA also has: Yet, we've heard from people who have used passwords unique to TeamViewer, who have enabled two-factor authentication, and have found no malware on their computers, losing control of their systems in the past few days via TeamViewer. Apparently TV disagrees, but in this case I'm inclined to believe their unfortunate users.
- colemickens 10y agoHow could that even be possible? Short of PayPal having a hole in their 2FA implementation, it's very difficult for me to imagine how this could happen. I mean, unless the hackers logged in, left the 2FA prompt up and then a user completed the 2FA exchange, but that would be a foolish thing to do anyway... edit: thanks for the answers; makes sense!
- ryanlol 10y agoPresumably the 2fa is just for the login, and the user would already be logged into paypal on their computer. Your paypal account getting hacked isn't a Big Deal, you aren't going to lose any money over it. In fact, managing that is paypals entire business model.
- Blaaguuu 10y agoI believe they were saying that they have 2FA on TeamViewer, not on PayPal.
- chias 10y agoThis is referring to TeamViewer's 2FA, not Paypal's 2FA
- fapjacks 10y agoThat little "remember me for 30 days" checkbox.
- gcr 10y agoI'm guessing 2FA here refers to TeamViewer's 2FA, not PayPal's 2FA.
- hackuser 10y ago> thanks for the answers; makes sense! How is it easier to break Teamviewer's 2FA implementation than PayPals?
- colemickens 10y agoYeah, sorry, that was confusing. I don't really agree with the comments saying that the comment was referring to TV's 2FA. I agree with fapjacks/ryanlol's comments. I (think I) now understand why "and my PayPal has 2FA enabled" points to TV being compromised -- If the PayPal account has 2FA active, and they were still "hacked", then it points to an existing session being hijacked. And a probable cause of that would be a compromised TV session. So it's not necessarily an indication that TV's 2FA was compromised, but rather that TV was compromised in general, allowing the hacker to hijack TV sessions. (I'm imagining that the TV 2FA happens on their central server, and not on the actual server daemon running on the target remote machine... so if the central server was compromised...) edit: Obviously this is entirely speculative, I don't know any of what's going down, but it resolves my initial curiosity.
- lvs 10y agoIf true, it points to a true compromise of TV servers, not just bruteforce with email/password dumps.
- deleted 10y ago[deleted]
- Buge 10y agoTons of people in the reddit thread claimed they never used their Teamviewer password for anything else. If Teamviewer's password database was compromised, that could be one example of a way to explain this.