Sabitlenmiş Tweet
PSA about what happened to me on here Sunday.
For a few weeks I kept getting notifications about different IP addresses that were attempting to log into my account. X suggested turning on 2FA but I kept going. Finally on Sunday they succeeded.
How did they succeed? Did I click on something? No, I did not. Phishing scams do not work on me. What happened was my email associated with my account had been in 15 data breaches over the years. And one of the data breaches was Twitter in 2023. In that 2023 Twitter data breach they got usernames and passwords. If you haven't changed your password on X since 2023 do yourself a major favor and do that right now then turn on 2FA.
And then you can go to a site like : Have I Been Pwned
and type in your email and it will show you every data breach associated with that email and exactly what they got access to in that breach.
Forensics has revealed more about the group that got into my account and what sort of scam they were attempting to run.
Needless to say if you ever see this account suddenly flip to offering some private crypto coin to flip into another larger crypto to then go to a website for some bullshit opportunity ( in this case some agentic ai create businesses that don't need people ) ... you know that ain't me. Report it like many of you did to help slow them down.
Those of you who reported the hacked activity helped in slowing them down. Those of you like @RichardMoglen @TMLTrader @alphacharts365 @amphtrading that put out posts for me tagging @Support @premium @nikitabier @X helped push the ticket along faster imho. @NickSchmidt reaching out to the right folks on my behalf I think helped a lot.
They had control of the account for half a day, but most of the time it was locked. By the time I found out and filed with X on it that took around 6-9hrs. The initial automated returns from their system are unnerving because they essentially read like "We can't do anything for you." There needs to be a better process for Premium+ folks that are ID verified. But filing a few more tickets referencing the prior ticket numbers in each new one finally got to the point where when I went to file the fifth one when I hit submit it read "can't submit as you are already in the queue." When I saw that I knew it was getting pushed for human review or whatever the next automation was. And that turned out to be a series of emails from X to submit my ID and answer some more questions.
After that X changed the email back to mine.... locking out the hacker who had changed it to their email locking me out. And then I had to log in ... create a new password ... verify the email, etc.
After doing that you have to wait 24hrs before you can flip on the 2FA. They do that just in case the hacker gets back in they don't want them turning on the 2FA to really lock you out. So last night was finally that 24hr mark and I was able to get the 2FA turned on. Didn't want to post about anything until I got that done.
And of course every change that is made there's a 24hr period before anything else can be changed. The last thing I need to do is fix my bio where they changed that.
Will find a new pic to put in when I do that next. And of course write back in my bio in proper English.
Thank you for your attention to this matter! 🇺🇸🐒
English
