Credential Stuffing: How PRC almost hacked my Steam

We’ve all witnessed some pretty big password leaks. 6.4m unsalted passwords leaked from LinkedIn, then 500m passwords leaked from Yahoo. This is truly scary, even if you haven’t been using your Yahoo account. To see why let us go back to when I almost fell victim to a credential stuffing attack from China.

‍First of all, “credential stuffing” is a fancy name for password reuse. All it takes is somebody with very intermediate computer security knowledge, looking up …

account attack back big china computer computer security credential credential stuffing credential stuffing attack hacked knowledge leaked leaks linkedin name password passwordless password reuse passwords prc prove reuse scary security steam victim yahoo