USE MFA!
If you don't have multi-factor authentication set up on your accounts, SET IT UP! Especially if you make a digital living! Authentication apps are FREE. I recommend Google Authenticator, but there are many good options out there.
What upsets me the most is that session injection isn't some obscure technique. It was common in the forum days 20 years ago. And devs learned to write forum software to safeguard against it. But modern app companies seem to be completely unaware of any of the security lessons we learned back then.
If you want a good chuckle, my friend got compromised because of an honest mistake.
The hackers proceeded to message our in group paranoid info sec guy. Fireworks ensued.
it's like...laughable how many folks are failing this basic internet security test. We thought it was our parents falling for the scams when it was our friends all along