Compromised Twitter account - how?

A

al_pacino

Regular Member
Joined
Mar 6, 2011
Messages
280
Reaction score
14
Here's my story. I have a Twitter account with a strong password and with 2FA activated (Google Authenticator). These days, two guys replied to some DMs I never sent to them. The scammer deleted the messages he sent from my inbox. I told them that I never DMd them. I immediately logged out from all devices and changed my password before that and also the backup code.

Question 1: how the fk my account was hacked?

Question 2: what should I do now to never happen again?

One more thing, I checked all the IPs my account recently logged in, and all were mine. No strange IP out there. So how is that possible, to not leave any traces?
 
Advertise on BHW
if your account is safe you might want to report this to support, it could be a new hack
 
Did you lose access to the account in question?
 
You may have inadvertently provided your login details on a fake Twitter login page through a phishing attempt.
 
Guendo said:
You may have inadvertently provided your login details on a fake Twitter login page through a phishing attempt.
Click to expand...
Possible, but not probable. I am very careful with these things. I alway stay logged in in the same place.
 
Hi, so sorry to hear you are facing this situation.
There are so many hacking methods, including the kind of hacking where an intruder breaks into your desktop while your computer is running.
In this case, the best solution is to change your computer's hard disk.
The second solution would be to contact Twitter support, they will help you find the moment of hacking (if it is not a hack of user data by Twitter itself) this happens too, unfortunately.
 
al_pacino said:
Here's my story. I have a Twitter account with a strong password and with 2FA activated (Google Authenticator). These days, two guys replied to some DMs I never sent to them. The scammer deleted the messages he sent from my inbox. I told them that I never DMd them. I immediately logged out from all devices and changed my password before that and also the backup code.

Question 1: how the fk my account was hacked?

Question 2: what should I do now to never happen again?

One more thing, I checked all the IPs my account recently logged in, and all were mine. No strange IP out there. So how is that possible, to not leave any traces?
Click to expand...
looks like you got away with it
 
One posiibility I strongly consider is that, somehow, I used many years ago some marketing tools and maybe my account got stucked there, even if my password changed since then. From time to time, I see 2-3 new people I recently randomly followed, WITHOUT me doing anything for this. I am 100% sure I didn't follow anyone, but still, random accounts pop up as new followed accounts by me, without knowing that. So maybe there is also a connection with this fact?
 
If it some kind of cookie steeling scheme involved it makes 2FA useless, could also be phishing.
 
al_pacino said:
No, he didn't change my password or anything else.
Click to expand...
Really just deleted a message they likely sent? That's really odd. I think I've heard of things tangentially like that happening. Like how some emails with verification codes seemingly getting read without an apparent direct access to the email account, so no password or setting is changed. That or there's something else entirely at play.
 
If 2fa wasnt triggerred then you just got your cookie, useragent and ip compromised. Thats it. The intruders didn't even had to "log in"
 
seems like you are safe for the time being. It might be possible that someone might have access to your PC.

For me I daily receive an email saying We noticed an attempt to log in to your account. I am lazy to implement any 2fa or anything.
 
Bad news. Even after I deleted cookies, logged out from all devices, changed my password, still using Google Authenticator as 2FA etc., and the messages are still sent from my account as nothing has happened. WTF. What should I do?
 
al_pacino said:
Bad news. Even after I deleted cookies, logged out from all devices, changed my password, still using Google Authenticator as 2FA etc., and the messages are still sent from my account as nothing has happened. WTF. What should I do?
Click to expand...
Wait did u delete cookies in your browser?
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top