Might be a token or authorization thing from them and exploited something?
If you look in the third post.
It's requested "token" for the the verification drag by his fake MEE6. That's why, even my account have 2FA it's useless because he overdrive my account using a token. During my hacked account, the password is not change at all.