An attack that reuses username/password combinations leaked from other services to attempt unauthorized logins.
It exploits the fact that people reuse passwords, mechanically trying a list of leaked credentials against many services in bulk to find accounts that succeed. Adopting multi-factor authentication or passkeys is an effective countermeasure.
© 2026 ITBGM