Well crap! My Twilio API credentials were leaked. This apparently happened a long time ago but someone just started using them. Fortunately it is just a developer test account with limited re-charge and I caught it fairly quickly but fixing all the apps is going to be a PITA.