What gets taken
Credentials, cookies, wallets, and files fuel initial access brokers and extortion crews. MaaS lowers skill bars and raises scale.
Mitigations that hold
- Block consumer-account sync on corporate devices.
- Mandatory MFA, rapid credential rotation, and honeytokens.
- Awareness programs backed by measured phishing drills.