I'm guessing 2FA here refers to TeamViewer's 2FA, not PayPal's 2FA.

> thanks for the answers; makes sense!

How is it easier to break Teamviewer's 2FA implementation than PayPals?

Yeah, sorry, that was confusing. I don't really agree with the comments saying that the comment was referring to TV's 2FA. I agree with fapjacks/ryanlol's comments.

I (think I) now understand why "and my PayPal has 2FA enabled" points to TV being compromised -- If the PayPal account has 2FA active, and they were still "hacked", then it points to an existing session being hijacked. And a probable cause of that would be a compromised TV session.

So it's not necessarily an indication that TV's 2FA was compromised, but rather that TV was compromised in general, allowing the hacker to hijack TV sessions. (I'm imagining that the TV 2FA happens on their central server, and not on the actual server daemon running on the target remote machine... so if the central server was compromised...)

edit: Obviously this is entirely speculative, I don't know any of what's going down, but it resolves my initial curiosity.

Presumably the 2fa is just for the login, and the user would already be logged into paypal on their computer.

Your paypal account getting hacked isn't a Big Deal, you aren't going to lose any money over it. In fact, managing that is paypals entire business model.

This is referring to TeamViewer's 2FA, not Paypal's 2FA

That little "remember me for 30 days" checkbox.

I believe they were saying that they have 2FA on TeamViewer, not on PayPal.