"Attackers who infiltrate a social media account often immediately change the recovery email and phone number for the account, essentially locking the owner out. For the average Joe, attempting to get a resolution when this happens can be extremely difficult"