Twitter just locked out my business account for suspicious activity. I was told to verify by phone (there was also another process I had to follow first but this was completely skipped) and used a phone number I've used for other countless accounts.

So I get the verification code and then setup SMS 2FA (because I'm a spiteful bastard) and guess what the verification code for MFA was?

Same. Exact. Code. Coincidence?

Oh, and when I complained about it on twitter someone with a new account offered to sell me guns. But my business account where I talk about security got locked out.

Good job, Elongo.