Credential stuffing
Appearance
Credential stuffing is a type of automated threat used to verify the validity of stolen account credentials through a large scale automated login process against a web application.[1] The term was coined by Sumit Agarwal, co-founder of Shape Security, who was serving as Deputy Assistant Secretary of Defense at the Pentagon at the time.[2] Credential Stuffing attacks are considered a rising threat for web and mobile applications as a result of the record number of credential spills.[3]
References
- ^ "Credential Stuffing". OWASP.
- ^ Townsend, Kevin (January 17, 2017). "Credential Stuffing: a Successful and Growing Attack Methodology". Security Week. Retrieved February 19, 2017.
- ^ Chickowski, Ericka (January 17, 2017). "Credential-Stuffing Attacks Take Enterprise Systems By Storm". DarkReading. Retrieved February 19, 2017.