Talos details ARToken, a PhaaS panel tied to EvilTokens that supports device code phishing, BEC workflows, SharePoint theft, ...
Chrome and Edge 149 add selective format read, so pasting only pulls the clipboard data a site actually needs.