Compromised Twitter account - how?

[al_pacino]

Here's my story. I have a Twitter account with a strong password and with 2FA activated (Google Authenticator). These days, two guys replied to some DMs I never sent to them. The scammer deleted the messages he sent from my inbox. I told them that I never DMd them. I immediately logged out from all devices and changed my password before that and also the backup code.

Question 1: how the fk my account was hacked?

Question 2: what should I do now to never happen again?

One more thing, I checked all the IPs my account recently logged in, and all were mine. No strange IP out there. So how is that possible, to not leave any traces?

 

[BiggusD1ckus]

if your account is safe you might want to report this to support, it could be a new hack

 

[imccafey]

Did you lose access to the account in question?

 

[Guendo]

You may have inadvertently provided your login details on a fake Twitter login page through a phishing attempt.

 

[al_pacino]

Did you lose access to the account in question?

No, he didn't change my password or anything else.

 

[al_pacino]

You may have inadvertently provided your login details on a fake Twitter login page through a phishing attempt.

Possible, but not probable. I am very careful with these things. I alway stay logged in in the same place.

 

[MyBrocard]

Hi, so sorry to hear you are facing this situation.
There are so many hacking methods, including the kind of hacking where an intruder breaks into your desktop while your computer is running.
In this case, the best solution is to change your computer's hard disk.
The second solution would be to contact Twitter support, they will help you find the moment of hacking (if it is not a hack of user data by Twitter itself) this happens too, unfortunately.

 

[proxygo]

Here's my story. I have a Twitter account with a strong password and with 2FA activated (Google Authenticator). These days, two guys replied to some DMs I never sent to them. The scammer deleted the messages he sent from my inbox. I told them that I never DMd them. I immediately logged out from all devices and changed my password before that and also the backup code.

Question 1: how the fk my account was hacked?

Question 2: what should I do now to never happen again?

One more thing, I checked all the IPs my account recently logged in, and all were mine. No strange IP out there. So how is that possible, to not leave any traces?

looks like you got away with it

 

[al_pacino]

One posiibility I strongly consider is that, somehow, I used many years ago some marketing tools and maybe my account got stucked there, even if my password changed since then. From time to time, I see 2-3 new people I recently randomly followed, WITHOUT me doing anything for this. I am 100% sure I didn't follow anyone, but still, random accounts pop up as new followed accounts by me, without knowing that. So maybe there is also a connection with this fact?

 

[BertIsFat]

If it some kind of cookie steeling scheme involved it makes 2FA useless, could also be phishing.

 

[imccafey]

No, he didn't change my password or anything else.

Really just deleted a message they likely sent? That's really odd. I think I've heard of things tangentially like that happening. Like how some emails with verification codes seemingly getting read without an apparent direct access to the email account, so no password or setting is changed. That or there's something else entirely at play.

 

[IllIIIlIIlIIIIlIl]

If 2fa wasnt triggerred then you just got your cookie, useragent and ip compromised. Thats it. The intruders didn't even had to "log in"

 

[al_pacino]

If 2fa wasnt triggerred then you just got your cookie, useragent and ip compromised. Thats it. The intruders didn't even had to "log in"

What should I do then to fix it?

 

[IllIIIlIIlIIIIlIl]

What should I do then to fix it?

prob stop using freeware to boost reactions or something

 

[al_pacino]

prob stop using freeware to boost reactions or something

I stopped using that years ago. I mean, if I use, I don't connect with my password anywhere.

 

[BertIsFat]

What should I do then to fix it?

Just log out of all your devices, then everybody requires a new cookie. The question is how they got it in the first place and if it could happen again?

 

[al_pacino]

Just log out of all your devices, then everybody requires a new cookie. The question is how they got it in the first place and if it could happen again?

No idea

 

[alonelywriter]

seems like you are safe for the time being. It might be possible that someone might have access to your PC.

For me I daily receive an email saying We noticed an attempt to log in to your account. I am lazy to implement any 2fa or anything.

 

[al_pacino]

Bad news. Even after I deleted cookies, logged out from all devices, changed my password, still using Google Authenticator as 2FA etc., and the messages are still sent from my account as nothing has happened. WTF. What should I do?

 

[IllIIIlIIlIIIIlIl]

Bad news. Even after I deleted cookies, logged out from all devices, changed my password, still using Google Authenticator as 2FA etc., and the messages are still sent from my account as nothing has happened. WTF. What should I do?

Wait did u delete cookies in your browser?