Learn in the textbookAttacks Targeting Passwords and Authentication
DefinitionCredential stuffing (クレデンシャルスタッフィング) tries leaked credentials (ID–password pairs) one after another on the logins of other sites, and it names the same technique as a password list attack.
ExplanationWhichever name is used, the attack relies on real pairs leaked somewhere else. Tools often enter large numbers of pairs automatically, so a single leak can lead to unauthorized logins on many sites.
Memory hookCredential means login information and stuffing means cramming in: the name pictures leaked credentials being crammed into login boxes one after another.