{"id":51199,"date":"2024-05-07T09:59:15","date_gmt":"2024-05-07T13:59:15","guid":{"rendered":"https:\/\/www.kaspersky.com\/blog\/?p=51199"},"modified":"2024-05-07T09:59:15","modified_gmt":"2024-05-07T13:59:15","slug":"what-is-credential-stuffing","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com\/blog\/what-is-credential-stuffing\/51199\/","title":{"rendered":"What is a credential stuffing attack?"},"content":{"rendered":"

Millions of accounts fall victim to credential stuffing attacks each year. This method has become so widespread that back in 2022, one authentication provider reported an average of one credential stuffing attempt for every two legitimate account logins<\/a>. And it\u2019s unlikely that the situation has improved over the past couple of years. In this post, we\u2019ll discuss in detail how credential stuffing works, what data attackers use, and how you can protect your organization\u2019s resources from such attacks.<\/p>\n

How credential stuffing attacks work<\/h2>\n

Credential stuffing is one of the most effective ways to compromise user accounts. Attackers leverage vast databases of pre-obtained usernames and passwords for accounts registered on various platforms. They then try these credentials en masse on other online services, hoping that some will work.<\/p>\n

This attack preys on the unfortunate habit that many people have of using the same password for multiple services \u2013 sometimes even relying on a single password for everything. As a result, attackers inevitably succeed in hijacking accounts with passwords that victims have used on other platforms.<\/p>\n

Where do these databases come from? There are three main sources:<\/p>\n