Vulnerability Yandex money or how to recover a payment password

Good afternoon, Habr!

I want to tell you a story about how easily and effortlessly it was possible to recover the Yandex.Money payment password.
')
Recently, I came across an ad offering Yandex.Money withdrawal services for a certain percentage without a password. Searching on the Internet, I came across a topic in which this method of recovering a payment password was described.



As you can see the method was very simple.

I wrote to Yandex support service, after which the vulnerability was closed, but I never received an answer.