Credential stuffing

●●●○○Intermediate

A sign-in from an unknown country succeeded on an account you had forgotten existed.

0 / 10 free simulations used

New message · Fictional online service

Fictional Service <security@fictional-service.example-not-real.test>

New sign-in to your account Device: Windows — Unknown browser Approximate location: outside your usual country Status: sign-in successful This account uses the same password as your main email account.

What do you do?

This simulation illustrates Credential stuffing. The article explains the full mechanism, the warning signs and what to do.