PlayStation Network users report a new account takeover method that bypasses two-factor authentication. Hackers allegedly exploit a loophole to access accounts using only one transaction ID from the target account. The vulnerability allows attackers to change linked emails and take full control of compromised profiles.
Users report hackers bypassing two-factor authentication using a single transaction ID to steal PSN profiles and change linked emails without official Sony patches.
Users describe how hackers obtain a single transaction ID and provide it to Sony as evidence of account ownership. This reported method reportedly stems from a verification flaw that requires no additional credentials. Colin Moriarty, who calls himself the Godfather of PlayStation podcasts, highlighted the issue in discussions about the exploit.
Sony has not issued an official statement or patch for this security gap. The company remains silent while players warn others to monitor their account activity closely. Users continue to share details of how they lost access despite having two-factor authentication enabled on their profiles.
The reported vulnerability highlights ongoing challenges for gaming platforms securing user accounts against sophisticated attacks. Players rely on platform providers to address these flaws quickly before widespread exploitation occurs.
Source: TweakTown
