credential stuffing

Also known as Password List attack

type of cyberattack where stolen account credentials typically consisting of lists of usernames or email addresses and corresponding passwords are used to gain unauthorized access to user accounts through large-scale automated login requests