Image courtesy of Engadget
Engadget explains credential stuffing — the use of stolen login credentials to take over accounts at scale — in the context of the 23andMe breach that affected nearly 7 million users, where attackers used the technique to gain initial access and then leveraged DNA Relatives to expand their reach. The piece explores how the attack vector has become easier to execute as credential databases proliferate and automation tools lower the barrier for attackers. Arkose Labs is cited in the broader discussion of defenses enterprises and consumers can deploy against credential stuffing.
