Even if 2FA prevents you from logging in, you still get A LOT of information from a keylogger. You know the content of all the emails this user writes. You kno

Even if 2FA prevents you from logging in, you still get A LOT of information from a keylogger. You know the content of all the emails this user writes. You know the websites they visit. Based on the 2FA auth key they use, you may find out what kind of system it is. A great start for social engineering. The target user writes an email to someone and the day afterwards you can fake call them and pretend to be the recipient of the email (you have all the information). If you're lucky they wrote an email to management and now you can pass orders in this call.