Technique
technique:credential_stuffing_and_password_mutation
Also: password reuse
Use of passwords from breach databases and predictable site-specific variations to access additional accounts.
Use of passwords from breach databases and predictable site-specific variations to access additional accounts.
“it would display the public passwords of them”
“let’s try yahoocom”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Joseph Harris | Explicit | 118 |
Joseph Harris USES Credential stuffing and password mutation
Joseph searched breach data for passwords and tried common variants and site-specific mutations.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“I’m copying these passwords, I’m trying them with variants”