What is Brute-force and credential stuffing attacks?
In short
A brute-force attack tries many possible passwords until one works. Credential stuffing tries username and password pairs stolen from other breaches, exploiting people who reuse passwords.
Key takeaways
- Password spraying tries a few common passwords against many accounts to avoid lockouts.
- Defenses include multi-factor authentication, account lockout and rate limits, and unique passwords.
- Monitoring for many failed logins helps detect attacks.
Where it's tested
ISC: Information Security Fundamentals — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
To send a confidential message that only the intended recipient can read, which key should the sender use to encrypt it?