Credentials
Adversaries may gather credentials that can be used during targeting. Account credentials gathered by adversaries may be those directly associated with the target victim organization or attempt to take advantage of the tendency for users to use the same passwords across personal and business accounts.
Bruteforce
Password Spraying
Password Stuffing
Default Passwords
https://cirt.net/passwords
https://default-password.info/
https://datarecovery.com/rd/default-passwords/Last updated