Social media accounts can be hacked in several ways: 1) Through weak or stolen credentials obtained via social engineering, password resets, data breaches, or brute forcing. Social engineering involves manipulating users and can include phishing. 2) By finding vulnerabilities or bugs in applications that allow account takeovers. 3) When users reset their passwords, attackers may be able to see parts of the linked email or other information to compromise the account. 4) Through brute forcing, which is trying lists of passwords or usernames on the target account until gaining access. 5) Social engineering techniques like phishing fool users into providing sensitive information that enables unauthorized access.