It's been that way for months: https://www.buzzfeednews.com/article/ryanmac/scammers-are-im...
Twitter recently tried to fix it by locking nonverified accounts which change their name to Elon Musk (https://www.theverge.com/2018/7/24/17610348/twitter-elon-mus...). Now scammers just hack verified accounts to do it.