vulnerability is discovered by one of the legendary hacker who ever hacked NASA and Pentagon security systems, TinKode.
The man with the real name Razvan Cernaianu it claimed to have kindly report its findings to PayPal in order to be addressed.
Through his blog, Cernaianu explain the steps to double the money in the PayPal system is fairly easy, by making multiple accounts.
To fool the system users are required to make three different accounts, one is the original account, the second account to be used as a virtual salesperson, and another account with a different identity. All three must be connected with a virtual credit card. "you send money to the second account by pretending to buy the phone from him.
From the second account, the money received is transferred to a third account as a gift," said Cernaianu. "After 24 hours of use function chagerback account The first to take the money from the second account, the reason being the phone that promised not acceptable, "he added.
Due to the latter is a virtual account, then there is no money to be extracted by PayPal. Instead, users will get the money refund received from a second account with the official account. So in this case there are two accounts (first and third) who have money can be withdrawn users.
As quoted detikINET of Cyber Smart Defence , Tuesday (06/17/2014), the manner claimed Cernaianu successfully fool the PayPal system. But the current findings are being studied by PayPal to shut down.
Source : Detik
0 komentar:
Post a Comment