Ok, here goes the story.Morning received this message 
Like an idiot, I fell into the trap. Clicking the link took me to an official looking webpage of twitter. Asked for mobile authentication ( i had 2FA on)
This is handle which did this, looked like exact Twitter Support handle. ( now changed after I reported this to twitter ). Had a blue tick , verified mark
the hacker first removed my 2FA, then changed email, then changed password. All these were notified on my original email. I immediately reported this to official twiiter support via email
They asked for all details including official ID image ( I gave Aadhar). Around 4pm they got into action and resolved all, my original ticket was at around 8am
This was social engineering at best. Message came early morning, as such I was a bit groggy ( more as I got vaccinated day before yesterday). What I learnt from twitter was this :
1. Twitter will never DM you, they always communicate over email
2. They will not ask for userid/password or 2FA mobile codes
3. If hacked, don't panic. @TwitterSupport will help you. Wait till US timings
2. They will not ask for userid/password or 2FA mobile codes
3. If hacked, don't panic. @TwitterSupport will help you. Wait till US timings
• • •
Missing some Tweet in this thread? You can try to
force a refresh
