I think the biggest 'proof' there is that the twitter account states they haven't received any 2FA requests. Assuming we're taking this as truth then: 1.) Some

I think the biggest 'proof' there is that the twitter account states they haven't received any 2FA requests. Assuming we're taking this as truth then: 1.) Somehow MFA got disabled on the account (or avoided altogether) 2.) Could've got SIM swapped. However this seems rather unlikely, as there are no other reported IoCs which point toward SIM swapping (i.e. can't call or text). > "I wouldn’t trust the word of a hacker/recipient of a hacked account." I wouldn't discount it. This isn't some APT that ran a Stuxnet operation. It's someone who allegedly exploited a system to get an og account. The whole reason people want og accounts is because they're a status symbol in some circles. It's quite likely that someone associated with stealing an og is an immature braggart. So they may do things immature braggarts would do... like talk about their TTP.