Credential stuffing is a type of cyberattack that typically involves repeated attempts to log in to online accounts using usernames and passwords stolen from other online services. It leverages the natural human tendency to reuse passwords to cope with the ever-growing number of online accounts that must be managed.
Attackers know that the username and password used at one website may also be used at a half-dozen others.