What about the Telegram bots (API) or website which ask you to connect your twitter or Reddit account to be able to participate in their social media task so as to earn tokens. Is there any possible scam or compromisation of social media accounts?
Normally, there are different types of scam, there are scams called API scam, they have sites that looks similar or identical to normal legit site, the scammers target victims in a way the victim login through the fake link provided by the scammers, from there, the scammers will be able to access the users account if the user uses the fake phishing link to login into his/her account. This is a common type of scam now.
Very possible social media account can be compromised, I have seen two to three cases like that, even to the extent the scammers will compromise the social media account, chatting with the the victim friends which can lead to their friend being scammed can follow, thinking the account owner is the one chatting with him not knowing it is a scammer.
Any account can be compromised by malware, and about API, your login details can be known, they all make use of malware to compromise peoples accounts. That aside, also know that these malware can compromise anything related to the victim. We should be careful of these attacks.
About API, maybe what you mentioned are free APIs. Free sometimes contains risks.
The OP is referring to web API keys, when the scammers comoromized the account already by knowing the login details, then this opens access to the API key, then possibility to control the victim's account. The victim may not know until he lost funds on the account.
