Brute-force attack … P server exposed to the internet with admin/admin credentials and no limit on failed logins. This happens far more often than you would think.

Credential stuffing … nd Instagram, counting on people reusing the same credentials on several services — which in most cases holds.

IoT Device Compromise IoT device compromise hits cameras, routers, sensors, smart televisions, locks, controllers and all the equipment connected to a network that does not behave like a classic computer. The problem is that these devices are often forgotten the moment they are switched on.

Keylogger Keylogger embedded in a trojan collecting banking credentials

Password spraying Password spraying is brute force turned around. Instead of trying many passwords on one account, the attacker tries common passwords across many accounts. That avoids lockout, because each individual account sees only an attempt or two.

Backdoor … chine or network, regardless of patching, changed credentials or a reinstalled system.

DNS Poisoning … ut DNS poisoning takes them to a page that steals credentials.

Infostealer … n infostealer has one basic role: to collect your credentials. Saved browser passwords, cookies and session tokens, autofill data, crypto wallet keys — all of i …

Path Traversal … . One configuration file read can reveal database credentials, API keys and internal paths, and from there the attack is no longer reading but a breach of the a …

Phishing … a link, opening an attachment, or entering their credentials somewhere.

Privilege Escalation … running with more rights than they need. Leftover credentials and forgotten administrator accounts are frequent prizes. Each of those mistakes is a shortcut fro …

QR phishing - Quishing … ed document check, but the page asks for business credentials.

SMS phishing - Smishing … rom outside the official store, the attacker gets credentials, payment details or access to the phone.

SSRF … dpoint, the attacker can try to extract temporary credentials and move from one hole in an application to a compromise of the cloud account.

Shared Account Abuse … access belongs behind PAM, session recording and credentials issued for a limited time.

Whaling … uments, and the login leads to a page that steals credentials.