Dylan USES password reuse
Dylan tested credentials from a database dump against other services and found reused passwords.
Explicit Confidence 99% · Dylan EP 45 Details
“Let’s see if they reuse passwords.”
Technique
technique:password_reuse
Also: credential reuse, password recycling, password reuse
Using the same or slightly modified password across multiple services, enabling access after a database compromise.
Reusing credentials across forums, personal accounts, and corporate systems to gain access to additional services.
“Let’s see if they reuse passwords.”
Reuse of usernames and passwords across sites, presented as a possible path from the Corporate Challenge site into JPMorgan’s network.
“so many people reuse passwords on multiple sites”
Reusing the same password across services, exemplified by the use of the LinkedIn password on Twitter.
“Would he be so stupid to use – to reuse his password for his Twitter accounts?”
“Trump was still using ‘yourefired’ as his Twitter password in 2016”
The reuse or variation of a password across systems, discussed as the basis for guessing the password of a high-profile account.
“they might reuse some or maybe they’d use slightly different versions of the same password”
Using the same or slightly modified password across multiple services, enabling access after a database compromise.
“people don’t exercise proper security. They use the same password on every site for years”
“the dangers of reusing the same password on multiple sites”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Dylan | Explicit | 45 |
| incoming | INVOLVES | JPMorgan Chase breach | Uncertain | 76 |
| incoming | INITIAL_ACCESS_VIA | Trump Twitter account compromise (2016) | Explicit | 87 |
| incoming | USES | The Guild of the Grumpy Old Hackers | Derived | 87 |
| incoming | INVOLVES | 2020 Trump Twitter account access | Uncertain | 88 |
| incoming | USES | Professor Dubstep | Explicit | 148 |
Dylan USES password reuse
Dylan tested credentials from a database dump against other services and found reused passwords.
Explicit Confidence 99% · Dylan EP 45 Details
“Let’s see if they reuse passwords.”
JPMorgan Chase breach INVOLVES password reuse
Password reuse is presented as a possible mechanism by which credentials from the Corporate Challenge site could have enabled access to JPMorgan's network.
Uncertain Confidence 92% · Jack Rhysider EP 76 Details
“Maybe some of those username and passwords were the same usernames and passwords used to log into JPMorgan Chase’s network.”
Trump Twitter account compromise (2016) INITIAL_ACCESS_VIA password reuse
The group gained access using Trump's LinkedIn password, 'yourefired', which was still valid for Twitter in 2016.
Explicit Confidence 99% · Jack Rhysider EP 87 Details
“Donald Trump was still using ‘yourefired’ as his Twitter password in 2016”
“we were in his Twitter account a couple of days before the election”
The Guild of the Grumpy Old Hackers USES password reuse
The Guild tested a password recovered from Trump's LinkedIn credentials against his Twitter account.
Derived Confidence 99% · Matt EP 87 Details
“Would he be so stupid to use – to reuse his password for his Twitter accounts?”
“He went straightaway to twitter.com, typed in the username @realDonaldTrump and typed in the password ‘yourefired’.”
2020 Trump Twitter account access INVOLVES password reuse
Victor suspected that Trump's Twitter password might reuse or resemble a password used by Trump's campaign, and tried variants of the rally Wi-Fi password; this is presented as a possibility rather than a confirmed practice.
Uncertain Confidence 91% · Jack Rhysider EP 88 Details
“they might reuse some or maybe they’d use slightly different versions of the same password”
Professor Dubstep USES password reuse
Professor Dubstep says the recovered passwords were tested on other services on the assumption that artists reused passwords.
Explicit Confidence 99% · Professor Dubstep EP 148 Details
“just hope that their security was not so great and that they kept reusing this password all the time”