📦
Credential Stuffing
Threats
Automated replay of breached credentials across services.
Definition
Credential stuffing uses automated tools and large credential datasets from breaches to test logins at scale across multiple relying parties.
In plain English
Automated replay of breached credentials across services.
Why this matters
Why it matters: It is one of the main drivers of account takeover and forces stronger authentication controls.
Example
Example: Bot-driven login attempts using breached combo lists against high-value targets.