Google Wallet users might be wise to start getting a little nervous.
The hack doesn’t require any extra software or root access.
The Smartphone Champ has revealed a simple hack that can provide access to all of the funds of a Google Wallet user — it’s far easier than a method of cracking the Google Wallet PIN that was revealed earlier this week.
“[The] hack doesn’t require extra software, root access, or any particular skills in general,” writes CNET News’ Lance Whitney. “Instead, all someone apparently has to do it clear the data for the Google Wallet app in the smartphone‘s application settings menu. The app is then reset and will prompt the person to enter a new pin number the next time it launches.”
“Since the Google Wallet information is linked to the device and not to the actual account, a person can then use the Google prepaid card already tied to the device to gain full access to the owner’s funds, explained The Smartphone Champ,” Whitney writes.
In response to the hack, a Google spokesman sent CNET the following statement:
“We strongly encourage anyone who loses or wants to sell their phone to call Google Wallet support toll-free at 855-492-5538 to disable the prepaid card. We are currently working on an automated fix as well that will be available soon. We also advise all Wallet users to set up a screen lock as an additional layer of protection for their phone.”
This latest Google Wallet hack follows an earlier hack reported by security blogging site Zvelo.
- Latest Google Wallet hack picks your pocket (news.cnet.com)
- Google Wallet Disables Prepaid Cards Following Security Fears (textually.org)
- Google Wallet’s PIN Verification Cracked (Again), No Root Access Required (androidpolice.com)