Credential Stuffing
Part of the Security Fundamentals section of Coddy's Cybersecurity journey. Lesson 24 of 43.
Suppose Lee uses the same password for Lumen and Beanly. If Beanly's passwords are stolen, an attacker can try Lee's password at Lumen too. Trying passwords stolen from one service on another is called credential stuffing.
A notice from the supplier can help you find which staff are affected. If it confirms that Lee reused a stolen password, replace that password at Lumen:
seclab reset leeYou should see:
Password reset for lee. Every session they had is signed out.Even a long password must be replaced once an attacker knows it. Using a different password for each service prevents one stolen password from opening several accounts. A password manager can help by creating and saving those different passwords for you.
Challenge
EasyTicket from Sam, IT lead
Beanly sent us a confirmed notice about stolen passwords. Read it to find which staff reused those passwords at Lumen. Replace exactly those passwords, even if MFA blocked the attacker. Keep MFA required and leave all current staff able to work.
Try it yourself