The file is a double-edged sword. For the ethical marketer, it represents a clean list of deliverable addresses—if compiled with permission. For the cybercriminal, it’s a stepping stone for spam, fraud, or account takeover.