A victim listing tied to the Icarus name points to a familiar SaaS risk: if CRM access is abused, the damage can come from ordinary exports and integrations, not flashy malware.