https://insider-gaming.com/sony-playstation-accounts-are-reportedly-being-hacked-with-ease/
https://x.com/mrpyo1/status/2056544512919687369
Please share this everywhere, Sony has a huge security issue, what this is about:
- Attackers only need your public PSN ID plus one piece of old transaction data, so usually a full order number or the last four digits of a card you used on the account at any point in the past.
- They contact Sony support (or use the automated recovery tool) and provide that information as “proof of ownership.”
- Sony’s internal support system then lets them change the email address linked to the account and disable 2FA. No login is required on their end.
Yes you read that right, people can disable mfa and change your Playstation email account if they manage to fool the Sony support. This is a huge security issue... 💀
Note: Colin got this account back, but this is a bigger issue that needs to be addressed. This has apparently happened to a lot of people
La sécurité chez Sony ayaaaaaaaaaa 