Account compromise and fraud: With stolen credentials or injected backdoors, attackers can access bank accounts, perform unauthorized transfers, or impersonate victims. Even if a mod initially works, subsequent use can expose account session tokens to attackers.