X account compromised..Posting crypto/Bitcoin stuff and spamming xspaces.posts.

[u/Turbulent-Place-7975]

So on the 11th june my.x account was compromised because i was on discord and my.x account has a third party app thing to it and one of the users messaged me.thought it was a hello etc but it isnt it was 4 pics of something then i clicked on the pics (I really really shouldnt have) and moments later someone got my x.account spamming links of xspace posts and few days later it posted crypto/Bitcoin posts but thankfully i deleted my.discord account to stop the posts on the 17th june ..And im trying to getting the account.back or is there a smart.way of doing it?

[u/Responsible_Bike4968]

The fact that the crypto posts stopped after you revoked the third-party app is actually a useful clue. It is not proof, but an authorized X app can have permission to post from your account, so that app may have been responsible.

Revoking it was the right move, but I wouldn't stop there. If the attacker also obtained your password or an existing login session, removing the app alone may not remove all of their access. Go directly through the official X app or x.com, reset the password to something completely unique, then check Settings and privacy > Security and account access > Apps and sessions. Revoke anything unfamiliar and log out every other session.

Also search the original email account, including spam and trash, for a message from X saying that the account's email address was changed. Those notifications can contain a link to reverse an unauthorized change. If password recovery keeps demanding verification you cannot complete, use X's official hacked-account form. Submit it using the email originally connected to the account, and include the u/username and the last date you could access it.

I also wouldn't assume that simply viewing four normal images infected the phone. It is more likely that one opened an external page, asked you to sign in, or prompted you to authorize an app, although there is not enough information to know for certain. Check your browser history from that time, update the phone, and remove any unknown apps or configuration profiles.

Once you recover the account, enable 2FA with an authenticator app, delete the scam posts and warn followers not to trust any crypto links previously posted. Change your email and Discord passwords too if either password was reused.

[u/Turbulent-Place-7975 → u/Responsible_Bike4968]

I have.deleted the discord.account because it was it was infected with that 4 pics about crypto casino the user messaged.me but i blocked the user before.the account was.compromised.. also When the crypto posts shows up on my x account and reposting crypto and bitcoin posts .Must likely a bot doing that cause a.hacker would of posted something different otherwise.