The security researchers say the attack vector they disclosed “is not limited in validity or amount.” And the thefts in Germany are reported to run to as much as €1,000 per transaction.

PayPal has at least temporarily shut off two-factor authentication for the PayPal mobile app after a security researcher found a way to bypass that second factor. "These [two factor authentication] ...