Brute force
Also called: brute-force
Guessing passwords by systematically trying many combinations until one works, usually against internet-facing logins such as VPN, remote desktop and email. Password spraying, which tries a few common passwords across many accounts, is a variant. Defenses are MFA, lockout or throttling after failed attempts, blocking weak passwords, and alerting on bursts of failed logins from one source or against one account.
Further reading: attack.mitre.org
Advisories that mention this term
HighRansomwareMonitoringBackfillMedia reported· updated Nov 7
Hong Kong South China Athletic Association Ransomware Incident Exposes Member Personal Data
According to China Daily Hong Kong, citing an investigation by the Office of the Privacy Commissioner for Personal Data (PCPD), the South China Athletic Association (SCAA) suffered a ransomware attack in March 2024 that affected the personal data of 72,315 members .