Compromised accounts allow the threat actor to access the user’s personal or business information, private messages, and contacts.