It happened to me two years ago, after I opened a doctored message. I contacted the Twitter assistance. I had to answer some verification questions. Once I regained access I opted for a 2FA based on Yubikeys.