Credential Stuffing and Account Generators: Cracked Accounts for the Masses

Presented at Kernelcon 2022, April 1, 2022, 3:20 p.m. (20 minutes).

Credential stuffing tools allow cyber criminals to quickly and easily crack large numbers of online account credentials. Websites described as "account generators" sell access to these stolen credentials giving almost anyone access to hacked online accounts. Learn about the FBI's takedown of one of these websites and what you can do to defend against credential stuffing.

Presenters:

• Jake Foiles
  Special Agent Jake Foiles has been assigned to the FBI Omaha Cyber Squad since 2015. SA Foiles previously worked in the IT sector for seven years as a network/systems engineer.

Similar Presentations:

• AppSec USA 2017 / Beyond Takeover – Attacker’s in. Now what?
• DerbyCon 6.0 Recharge (2016) / Deploying PAWs as Part of a Strategy to Limit Credential Theft and Lateral Movement