u/BeardMirage

So in short, my insta got hacked and hacker posted one of those fake "MrBeast" scam/fake cashouts etc, however I already have a double mfa on both my instagram and Facebook.
I've checked my log in history/device history/activity and nothing sus or weird showed up.
How can that be possible?
Is an a active session hacking a thing? if yes how can we protect ourselves from it? I do have device protection apps and still this happens...