Glossary: Attacks and Indicators

credential stuffing

Replaying real username:password pairs leaked from another site, betting that people reuse passwords. Each account sees only one or two failures, so it blends in with normal sign-ins.