Twitter hacked account - please help!

[wiggleit]

I loged in X Pro, here's what I found. What does it mean? I'm not a member of any team? Or I still could be?

You bought twitter pro?

Damn, this account must be really important to you? How many followers does it have?

Screenshot says you haven't been added to any Teams.... I guess the other option is to check your twitter API tokens and revoke them or regenerate them.

Or it could also be that your account was never hacked, and instead there's a copycat account similar to yours, same PFP, description, etc... that's sending out DM's

 

[al_pacino]

Yes, I have Twitter Pro. Yes, the account is important to me, I have many followers on it. The DMs are sent from my account for sure, not from a clone account, as the screenshots sent from the guys which were contacted are a solid proof for that. He sends the messages then deletes them from my account.

How to check API tokens and revoke them?

 

[al_pacino]

For now I see 2 possibilities:

1. My phone is hacked, as I didn't use the desktop/laptop, after the last change of the Twitter password.

2. My phone is not hacked, but the hacker has access somehow to my Twitter, bypassing the password and 2FA. Setting up a team with Twitter Pro would have suit this perfectly, as the team administrator don't need a password for the delegated accounts. But I checked and aparrantely my account was not delegated. So there is any other similar possibility?

 

[al_pacino]

Interesting. When I try to sign in into developer.twitter.com, it redirects me from browser to the Twitter app, where I am logged in, and then it displays an error "the term you entered didn't bring up any results...". Can someone explain what this means?

 

[medialounge]

Check if your email address or past passwords have been leaked in any data breaches. Use a service like Have I Been Pwned? to see if your information is compromised.

 

[al_pacino]

Check if your email address or past passwords have been leaked in any data breaches. Use a service like Have I Been Pwned? to see if your information is compromised.

Verified. It's not the case.

 

[MoonStarz]

My last password is stored on paper.

I mean your Gmail account, you use an code generator right? most of the code generators now have a feature to transfer the keys from one cellphone to another just by accessing your Google account, if someone have access to your Gmail account they log in download the app and get the access codes again, change your Gmail password disbale and enable 2fa to get unique verfications codes again, then change your twitter password and enable and disable 2fa to get new one time verification codes, if they are able to get access to your 2fa codes even if you change device and passwords it means that they might have your Gmail password and access the play store.

 

[al_pacino]

I mean your Gmail account, you use an code generator right? most of the code generators now have a feature to transfer the keys from one cellphone to another just by accessing your Google account, if someone have access to your Gmail account they log in download the app and get the access codes again, change your Gmail password disbale and enable 2fa to get unique verfications codes again, then change your twitter password and enable and disable 2fa to get new one time verification codes, if they are able to get access to your 2fa codes even if you change device and passwords it means that they might have your Gmail password and access the play store.

My Authenticator is not connected to my Google account. Exactly for that reason. So...

 

[al_pacino]

The fact that something is adding randomly a few accounts to those I follow every few days might be connected somehow with the messages access thing. Ideas? Where the account could have been connected? To which marketing tool? There are no traces, as I said. No connected apps apparently...