Mitigation strategies for service misuse in threat actors