A hacker used Twitter’s own ‘admin’ tool to spread cryptocurrency scam