Testing times for AV-Test as Twitter account hijacked by NFT spammers

An unauthorised party has seized control of the @avtestorg Twitter account, nuked its profile picture and banner, replaced its name and description with a full-stop, and set about retweeting numerous messages about NFTs.

Anti-virus testing organisation AV-Test appears to have done nothing wrong, so how was its account hacked?

2fa account av av-test hijacked nft spam spammers test testing twitter