The Problem: Over the past few weeks my twitter account keeps getting compromised. No phishing attacks or anything, just dirty DMs from my account to various friends. Sometimes my account will be "forced to reset password" multiple times a day, even. Each reset I use a 8-16 character password, randomly generated. I've revoked all apps except Disqus, Siri, Dropbox, and Medium.

Other Information: Plenty of my friends have been seeing similar things happen. Have you guys?

Theory: Is there a chance that this attack is coming from inside twitter? Maybe some internal app's api key was compromised? Could this in fact become an issue.

Twitter's support doesn't make this easy to work with. Hopefully the community has some input.