It happened to me two years ago, after I opened a doctored message. I contacted the Twitter assistance. I had to answer some verification questions. Once I regained access I opted for a 2FA based on Yubikeys.
Discussion
Yubikey is next
https://foundation.xyz/ could be an option as well.