Go West IT’s Post

Transcript

At the same time we have known list, we have known lists of passwords that people use. In 2023 we still have people using 123456 as their password. In fact, it is one of the top 10. And there are databases of millions of passwords that are available online and particularly in the dark web. So these these dictionary databases get put into the dark web. And thread actors have access to these databases, both the credentials that were leaked and the dictionaries. They will use those programmatically. It's not an individual sitting at a computer trying passwords one at a time. They will write software to programmatically try these passwords against lots of different types of sites and they will just keep trying until they're successful. Once they're successful, they verified that this set of credentials is good. And for all those people who use the same username and password everywhere, they now have access. They can double down on that set of credentials and get in the door and then go horizontally through an organization. So.