We’ve had several messages from our esteemed political followers (and their mates) exasperated that their Twitter accounts have been sending messages selling drugs and sex implements (implements?).
The most likely way your account has been hacked is the following:
1. You receive a message either on Twitter or by email (pretending to be from Twitter), saying something inane like “is that you?”, with a link to click on.
2. Curious, you click on the link, and this takes you to what looks like a Twitter log-in page. In fact this isn’t a on the Twitter site at all (the address might be something like http://twitter.buzzworgh.com) – it’s a trap intended to fool you into handing over your Twitter log-in credentials.
3. You enter your username and password, click on the “log-in” button and instead of logging you into Twitter, the page refreshes, and you find yourself on the (real) Twitter homepage. You enter your credentials again, and this time you are logged-into Twitter, oblivious to the fact that your credentials have been stolen.
4. The thieves then log in to your Twitter account and deploy an automated script that sends spam messages to all your followers.
5. If you are especially unlucky, the spammers also change your account password, so that you can no longer log in.
What to do if your Twitter account gets hacked in this way
1. Before you do anything else, try to log in to your account. If you can, change your password immediately, and make sure that the account email is still yours and wasn’t changed by the hackers.
2. Now go to your Twitter settings and revoke ALL third party connections to your account. This will stop any scripts that have been installed by the hackers from running on your account. As soon as you follow steps 1 and 2, the spammers can no longer use your account.
3. If the spammers have changed your password, try to reset it, using the password reset function on Twitter. If you are successful, quickly move to protect your account as explained in 1 and 2 above.
4. If you still cannot log-in to your account, you will need to submit a support request to Twitter. Unhelpfully, you need to be signed in to Twitter to submit a request, so you might have to sign-up to a temporary account to submit your request. In it, you should include:
- Your username
- Any email addresses you think might be associated with your account
- The last date you had access to your account
- The phone number associated with the account (if you verified your phone)
Finally, you might want to read Twitter’s advice on how to keep your account safe.