kenough

Thank you and sorry you had to go through all that. Luckily I was able to get in and delete the account. I've had multiple experiences with older relatives losing their accounts as well. It's tough to help them with security when they have trouble even navigating the app/browser let alone figuring out how to use an authenticator app. I've tried to get them cheap tablets or chromebooks to use specifically for their social media then keep their other computers just for email/taxes and that seems to have helped, but still not ideal.

And yes using an authenticator app is my big takeaway here too. I was lazy and delayed migrating all my accounts over to it, but this has definitely spurred some action on that front.

Great point about SMS 2FA. I've begun to go through any service that uses that and change it.

I had stopped using it for new 2FA configs a few years ago once it became more obvious that it's not secure, but I figured I'd be fine for my old accounts and the odds of anything happening would be very low. Lesson learned I guess.

Thanks and yeah I thought that could be a possibility, but my understanding is that my phone wouldn't be able to receive any network data or SMS messages after such an attack and it's been working fine the last few days. I can reach out though because perhaps there's multiple ways to do it now.