Could be front end, since all of these cite "Twitter Web App" as the source. Never anything else (unless you're a low-follower troll).

Maybe a popular browser extension? Would explain why it seems to target tech people.

Liable for the account being compromised? Twitter. Liable for people sending money? People sending money.