Siri asks permission to access the app and then pulls in the requested data. Note that this does not currently appear to work ...
Talos details ARToken, a PhaaS panel tied to EvilTokens that supports device code phishing, BEC workflows, SharePoint theft, ...