Leaked Twilio credentials — SMS fraud at scale

A Twilio Auth Token grants full access to your Twilio account: sending SMS, placing voice calls, purchasing numbers, and accessing call metadata. SMS fraud is the standard attacker workflow — international premium rates burn budget in hours.