Credential Stuffing
Credential stuffing is an automated attack where stolen username/password pairs from one data breach are tested against other services, exploiting the widespread habit of password reuse. It is distinct from brute force because it uses real credentials rather than guessing.
Frequently asked questions
What is Credential Stuffing?
Credential stuffing is an automated attack where stolen username/password pairs from one data breach are tested against other services, exploiting the widespread habit of password reuse. It is distinct from brute force because it uses real credentials rather than guessing.
How is Credential Stuffing related to Botnet?
Botnet in short: A botnet is a network of compromised devices ("bots") controlled by an attacker via a C2 server. Botnets are used for DDoS attacks, spam campaigns, credential stuffing, and ransomware delivery. Individual bots are often unaware they are compromised.
Related terms
Botnet
A botnet is a network of compromised devices ("bots") controlled by an attacker via a C2 server. Botnets are used for DDoS attacks, spam campaigns, credential stuffing, and ransomware delivery. Individual bots are often unaware they are compromised.
Phishing
Phishing is a social engineering attack that tricks users into revealing credentials, clicking malicious links, or downloading malware — typically via email. Spear phishing targets specific individuals; smishing uses SMS; vishing uses voice calls.
Try it on a real indicator
Look up any IP, domain, URL or file hash in the indexed records.