Since sibling commenters asked—the abuse mainly involved a heckuva lot of phishing, last I heard; for example: https://threatpost.com/spear-phishing-exploits-g

Since sibling commenters asked—the abuse mainly involved a heckuva lot of phishing, last I heard; for example: https://threatpost.com/spear-phishing-exploits-glitch-steal-credentials/176449/ https://threatpost.com/spear-phishing-exploits-glitch-steal-... https://www.netskope.com/blog/glitch-hosted-phishing-uses-telegram-fake-captchas-to-target-navy-federal-credit-union-customers https://www.netskope.com/blog/glitch-hosted-phishing-uses-te... Apparently the free ephemeral apps were (1) free, (2) easy to make and easy to make many of, and (3) hosted on infrastructure that targets tended to trust.