Three common ways that threat actors abuse their access to accounts they’ve taken over include financial fraud, data exfiltration, and malware/ransomware.