I bought a Twitter account last summer. I changed password, email, phone number, Twitter handle, everything. From last autumn I noticed a strange problem.
Someone is sending messages from my account. With a phishing link in them, I guess... He always deletes the messages, right after he sends it. But the guys who received it sent me screenshots, so I could see what's happening. I tried to stop him, I changed my password few times, I had to reset my 2FA, disconnected all the active sessions, deleted cookies etc. Still nothing. Seems the messages are still being sent. I checked the IP of all the recent logins, all are mine. I don't know how he has access to my account. I also seem to follow few random accounts from time to time, without really following them, I don't know who or why is following those random accounts (0-2 per day).
I never observed any strange IP, all the logins seems to be made only from my IP. Ok, there are 2 IPs, but both are from same location. I use mobile internet from my phone. I use it as a hotspot for all my devices (including my desktop and laptop).
I used only 3 devices to log in on Twitter: my mobile phone, a desktop computer and my laptop. Someone suggested that my desktop/laptop might have been hacked. I resetted both to factory settings. Deleted everything from them, cleaned the drive, uploaded Windows again from cloud. Before that I flushed the dns, repaired Windows corrupt files in command prompt.
After both computers were cleaned, I changed the Twitter password from my mobile phone and never used Twitter on the clean devices. I used Twitter only from my phone.
After 2-3 days, messages started again to be sent from my Twitter account. So, what is causing this? Any ideas?
If my laptop/desktop don't cause the problem, is my phone hacked?
If my phone is not hacked, what else?
Is it possible like the account could have remained connected to some marketing tool, so the hacker/previous owner of the account has still access, even if I activated 2FA, changed password etc.?
For now I see 2 possibilities:
1. My phone is hacked, as I didn't use the desktop/laptop, after the last change of the Twitter password.
2. My phone is not hacked, but the hacker has access somehow to my Twitter, bypassing the password and 2FA. Setting up a team with Twitter Pro would have suit this scenario perfectly, as the team administrator don't need a password for the delegated accounts. But I checked and aparrantely my account was not delegated. So there is any other similar possibility? I also tried to sign in into developer.twitter.com, but it redirects me from browser to the Twitter app, where I am logged in, and then it displays an error "the term you entered didn't bring up any results...". Can someone explain what this means?
If someone stole my cookies and hacked my phone, if I change the phone with a new, clean one, but with the same mobile internet connection & IP, is possible to be hacked again by the same hacker or he will need to send me an infected link or files to click/download first?
Someone is sending messages from my account. With a phishing link in them, I guess... He always deletes the messages, right after he sends it. But the guys who received it sent me screenshots, so I could see what's happening. I tried to stop him, I changed my password few times, I had to reset my 2FA, disconnected all the active sessions, deleted cookies etc. Still nothing. Seems the messages are still being sent. I checked the IP of all the recent logins, all are mine. I don't know how he has access to my account. I also seem to follow few random accounts from time to time, without really following them, I don't know who or why is following those random accounts (0-2 per day).
I never observed any strange IP, all the logins seems to be made only from my IP. Ok, there are 2 IPs, but both are from same location. I use mobile internet from my phone. I use it as a hotspot for all my devices (including my desktop and laptop).
I used only 3 devices to log in on Twitter: my mobile phone, a desktop computer and my laptop. Someone suggested that my desktop/laptop might have been hacked. I resetted both to factory settings. Deleted everything from them, cleaned the drive, uploaded Windows again from cloud. Before that I flushed the dns, repaired Windows corrupt files in command prompt.
After both computers were cleaned, I changed the Twitter password from my mobile phone and never used Twitter on the clean devices. I used Twitter only from my phone.
After 2-3 days, messages started again to be sent from my Twitter account. So, what is causing this? Any ideas?
If my laptop/desktop don't cause the problem, is my phone hacked?
If my phone is not hacked, what else?
Is it possible like the account could have remained connected to some marketing tool, so the hacker/previous owner of the account has still access, even if I activated 2FA, changed password etc.?
For now I see 2 possibilities:
1. My phone is hacked, as I didn't use the desktop/laptop, after the last change of the Twitter password.
2. My phone is not hacked, but the hacker has access somehow to my Twitter, bypassing the password and 2FA. Setting up a team with Twitter Pro would have suit this scenario perfectly, as the team administrator don't need a password for the delegated accounts. But I checked and aparrantely my account was not delegated. So there is any other similar possibility? I also tried to sign in into developer.twitter.com, but it redirects me from browser to the Twitter app, where I am logged in, and then it displays an error "the term you entered didn't bring up any results...". Can someone explain what this means?
If someone stole my cookies and hacked my phone, if I change the phone with a new, clean one, but with the same mobile internet connection & IP, is possible to be hacked again by the same hacker or he will need to send me an infected link or files to click/download first?
