I have X to blame more about this. Hacking someone's X account is something common nowadays. We hear about new hack every week or less. Even United States SEC account was hacked. If X want to protect people's accounts and have better security, sim authentication should be removed while remain authentication app and security key which is hardware 2FA.
I also have Trezor to blame about this. They are hardware wallet company but failed not to use either the security key or the authentication app.
Trezor has regained access to their account and
confirmed the hack. They also said that they used a strong password and had 2FA activated on Twitter. Some speculate it was a SIM swap attack.
They have just used now or they used strong password before? Also what kind of 2FA they used? If it is sim authentication, they are
very stupid and foolish.
It is because this type of scam is common and not new anymore.
I do not think Trezor also care about their customers at all. Not long when people that subscribed to their newsletter email accounts were compromised, now their X account.