I bought a Twitter account last summer. I changed the password, email, phone number, Twitter handle, everything. I also activated 2FA immediately.
From last autumn I noticed a strange problem. Someone is sending messages from my account. With a phishing link in them, I guess... He always deletes the messages, right after he sends it. The guys who received it sent me some screenshots, so I could see what's happening.
1. I don't think that my devices (laptop + desktop + phone) used to log in on Twitter were hacked. I recently used a fresh, clean, brand new phone to change the password and the 2FA (Google Authenticator), and I used Twitter only from that device. Guess what, it happened again. The same spam message is sent now from my Twitter account.
2. I am not part of a Team (I don't have Twitter accounts delegated to me and I didn't delegate other members either). I opened Tweetdeck/Twitter Pro and there are no teams there, nothing was delegated.
3. My Twitter is not connected to 3rd party apps.
4. There are no strange devices/apps logged in, beside me.
5. The only IP adresses used to log in are only mine.
6. I also checked developer.twitter.com and nothing there, I didn't find anything suspicious.
7. No SIM swap attack took place, as I can use my SIM as usual.
Any ideas, what else should I check? How can I get rid of the spammer and regain control over my DM box?
From last autumn I noticed a strange problem. Someone is sending messages from my account. With a phishing link in them, I guess... He always deletes the messages, right after he sends it. The guys who received it sent me some screenshots, so I could see what's happening.
1. I don't think that my devices (laptop + desktop + phone) used to log in on Twitter were hacked. I recently used a fresh, clean, brand new phone to change the password and the 2FA (Google Authenticator), and I used Twitter only from that device. Guess what, it happened again. The same spam message is sent now from my Twitter account.
2. I am not part of a Team (I don't have Twitter accounts delegated to me and I didn't delegate other members either). I opened Tweetdeck/Twitter Pro and there are no teams there, nothing was delegated.
3. My Twitter is not connected to 3rd party apps.
4. There are no strange devices/apps logged in, beside me.
5. The only IP adresses used to log in are only mine.
6. I also checked developer.twitter.com and nothing there, I didn't find anything suspicious.
7. No SIM swap attack took place, as I can use my SIM as usual.
Any ideas, what else should I check? How can I get rid of the spammer and regain control over my DM box?
