Question

Which of the following describes a credential stuffing attack?

answer

A hacker tires to gain elevated privileges on a network.


A hacker tries a list of passwords on a single site.


A hacker tries to get a user to click on a malicious link.


A hacker tries a list of credentials on multiple sites.

Answer 1

A hacker tries a list of credentials on multiple sites.

Explanation: Credential stuffing uses automated tools to test breached username/password pairs across many websites, hoping users reuse passwords. It’s different from phishing (malicious links), privilege escalation, or brute-force attempts on a single site.