Skip to main content
The homepageEven after twitter dropped sms 2fa someone still tried to hack my account via text | 2023 News | Global News NetworkThe Verge logo.
The homepageThe VergeThe Verge logo.
Posted
R
Richard Lawler
Even after Twitter dropped SMS 2FA, someone still tried to hack my account via text.

Someone initiated a password reset request on my account (I prefer Mastodon these days) and then sent this message to try to get me to text them the verification code I received from Twitter. Don’t they know Twitter already cut off SMS 2FA for non-Blue subscribers?

(FYI - you should use another form of two-factor authentication on your account, and you should never, ever resend a verification code via text — unless you think you can get a good story out of it.)

2FA phishing message reading - Twitter: We have noticed an unusual Login attempt from Dallas, Texas to your Twitter Account (@rjcc). We have sent you an 8 Character Confirmation Code to the E-mail Address connected to your Twitter Account (************@*****.***). Reply with the 8 Character Confirmation Code to block this login and set-up a new passcode. Reply with “YES” to authorize this login attempt.
The fake Twitter message trying to phish my verification code.
Image: Richard Lawler
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.
Comments
Loading comments
Getting the conversation ready...

Most Popular

Most Popular
  1. It’s not just LG. Every TV company is spying on you
  2. OpenAI and Microsoft knew they were starting a ‘doom loop’ for the web
  3. Gemini went rogue, hacked three companies, and Google hid it
  4. The 2.5-hour AI-generated Odyssey movie is 2.5 hours too long
  5. The Apple Watch Series 12 is the start of a new wearable era

More in Twitter - X

Top Stories