This SMS is part of a spear phishing attack, right? It came along with what looks like a legit email from Twitter's password reset system.
2
2
Replying to @rodbegbie @nelson
Exactly, which is why we need to make strong non-phishable MFA much more accessible and stop using SMS for this

Jul 6, 2022 · 5:58 AM UTC

1
Replying to @aaronpk @rodbegbie
I don't know if Twitter uses SMS for auth or not; mine is using a TOTP token. Twitter does have some protection against spurious password resets but I think it boils down to "do you know the email address for the account" which, well, of course anyone can guess that for me.