TokenLover and YaksaLover point to a market where business email compromise is being packaged as a service, with cloud identity as the real target.
Vacation changes the threat model: location leaks, public Wi-Fi, and rushed messaging can turn routine travel into an easy opening for phishing and account abuse.