{"id":71411,"date":"2024-01-19T00:12:03","date_gmt":"2024-01-19T05:12:03","guid":{"rendered":"https:\/\/world.edu\/?p=71411"},"modified":"2024-01-19T00:12:03","modified_gmt":"2024-01-19T05:12:03","slug":"what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains","status":"publish","type":"post","link":"https:\/\/world.edu\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\/","title":{"rendered":"What is credential stuffing and how can I protect myself? A cybersecurity researcher explains"},"content":{"rendered":"

\"\"<\/p>\n

Cyber-skulduggery is becoming the bane of modern life. Australia\u2019s prime minister has called it a \u201cscourge<\/a>\u201d, and he is correct. In 2022\u201323, nearly 94,000 cyber crimes were\u00a0reported<\/a>\u00a0in Australia, up 23% on the previous year.<\/p>\n

In the latest high-profile\u00a0attack<\/a>, around 15,000 customers of alcohol retailer Dan Murphy, Mexican restaurant chain Guzman y Gomez, Event Cinemas, and home shopping network TVSN had their login credentials and credit card details used fraudulently to buy goods and services in what is known as a \u201ccredential stuffing<\/a>\u201d attack.<\/p>\n

So what is credential stuffing \u2013 and how can you reduce the risk of it happening to you?<\/p>\n

Re-using the same login details<\/strong><\/h4>\n

Credential stuffing is a type of cyber attack where hackers use stolen usernames and passwords to gain unauthorised access to other online accounts.<\/p>\n

In other words, they steal a set of login details for one site, and try it on another site to see if it works there too.<\/p>\n

This is possible because many people use the same username and password combination across multiple websites.<\/p>\n

It is common for people to use the\u00a0same password<\/a>\u00a0for multiple accounts (even though this is very risky).<\/p>\n

Some even use the same password for all their accounts. This means if one account is compromised, hackers can potentially access many (or all) their other accounts with the same credentials.<\/p>\n

\u2018Brute force\u2019 attacks<\/strong><\/h4>\n

Hackers purchase job lots of login credentials (obtained from earlier\u00a0data breaches<\/a>) on the \u201cdark web<\/a>\u201d.<\/p>\n

They then use automated tools called \u201cbots\u201d to perform credential stuffing attacks. These tools can also be purchased on the dark web.<\/p>\n

Bots are programs that perform tasks on the internet much faster and more efficiently than humans can.<\/p>\n

In what is colourfully termed a \u201cbrute force\u201d attack, hackers use bots to test millions of username and password combinations on different websites until they find a match. It\u2019s easier and quicker than many people realise.<\/p>\n

It is happening more often because the barrier to entry for would-be cybercriminals has never been lower. The dark web is readily accessible and the resources needed to launch attacks are available to anyone with cryptocurrency to spend and the will to cross over to the dark side.<\/p>\n

How can you protect yourself from credential stuffing?<\/strong><\/h4>\n

The best way is to\u00a0never<\/em>\u00a0reuse passwords across multiple sites or apps. Always use a unique and strong password for each online account.<\/p>\n

Choose a password or pass phrase that is at least 12 characters long, is complex, and hard to guess. It should include a mix of uppercase and lowercase letters, numbers, and symbols. Don\u2019t use pet names, birthdays or anything else that can be found on social media.<\/p>\n

You can use a\u00a0password manager<\/a>\u00a0to generate unique passwords for all your accounts and store them securely. These use strong encryption and are generally regarded as pretty safe.<\/p>\n

Another way to protect yourself from credential stuffing is to enable two-factor authentication (2FA) for your online accounts.<\/p>\n

Two-factor authentication is a security feature that requires you to enter a code or use a device in addition to your password when you log in.<\/p>\n

This adds an extra layer of protection in case your password is stolen. You can use an\u00a0app<\/a>, a text message, or a\u00a0hardware device<\/a>\u00a0(such as a little \u201ckey\u201d you plug into a computer) to receive your two-factor authentication code.<\/p>\n

Monitor your online accounts regularly to look for any suspicious activity. You can also check if your email or password has been exposed in a data breach by using the website\u00a0Have I Been Pwned<\/a>.<\/p>\n

You may be surprised by what you see. If you do discover your login details on there, use this as a timely warning to change your passwords as soon as possible.<\/p>\n

Eternal vigilance<\/strong><\/h4>\n

In today\u2019s world of rising cyber crime, your best defence against credential stuffing and other forms of hacking is vigilance. Be proactive, not complacent about online security.<\/p>\n

Use unique passwords and a password manager, enable two-factor authentication, monitor your accounts, and check breach notification sites (like Have I Been Pwned).<\/p>\n

Remember, the recent attacks on Dan Murphy, Guzman y Gomez and others show how readily our online lives can be disrupted. Don\u2019t let your credentials become another statistic. As you are reading this, the criminals are thinking up new ways to exploit our vulnerabilities.<\/p>\n

By adopting good digital hygiene and effective security measures, we can take back control of our online identities.<\/p>\n

Author Bio:<\/strong> David Tuffley is a Senior Lecturer in Applied Ethics & CyberSecurity at Griffith University<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

Cyber-skulduggery is becoming the bane of modern life. Australia\u2019s prime minister has called it a \u201cscourge\u201d, and he is correct. In 2022\u201323, nearly 94,000 cyber crimes were\u00a0reported\u00a0in Australia, up 23% on the previous year. In the latest high-profile\u00a0attack, around 15,000 customers of alcohol retailer Dan Murphy, Mexican restaurant chain Guzman y Gomez, Event Cinemas, and […]\n… learn more→<\/a><\/p>","protected":false},"author":33,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[59],"tags":[434793],"coauthors":[11733],"class_list":["post-71411","post","type-post","status-publish","format-standard","hentry","category-science-tech","tag-credential-stuffing"],"acf":[],"yoast_head":"\nWhat is credential stuffing and how can I protect myself? A cybersecurity researcher explains - World leading higher education information and services<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/world.edu\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\/\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"og:locale\" content=\"en_US\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"og:type\" content=\"article\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"og:title\" content=\"What is credential stuffing and how can I protect myself? A cybersecurity researcher explains - World leading higher education information and services\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"og:description\" content=\"Cyber-skulduggery is becoming the bane of modern life. Australia\u2019s prime minister has called it a \u201cscourge\u201d, and he is correct. In 2022\u201323, nearly 94,000 cyber crimes were\u00a0reported\u00a0in Australia, up 23% on the previous year. In the latest high-profile\u00a0attack, around 15,000 customers of alcohol retailer Dan Murphy, Mexican restaurant chain Guzman y Gomez, Event Cinemas, and […]\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"og:url\" content=\"https:\/\/world.edu\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\/\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"og:site_name\" content=\"World leading higher education information and services\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"article:published_time\" content=\"2024-01-19T05:12:03+00:00\" class=\"yoast-seo-meta-tag\" \/>\n<meta property=\"og:image\" content=\"https:\/\/world.edu\/wp-content\/uploads\/2024\/01\/Credential-Stuffing.jpeg\" class=\"yoast-seo-meta-tag\" \/>\n<meta name=\"author\" content=\"Kevin\" class=\"yoast-seo-meta-tag\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" class=\"yoast-seo-meta-tag\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kevin\" class=\"yoast-seo-meta-tag\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" class=\"yoast-seo-meta-tag\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" class=\"yoast-seo-meta-tag\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/world.edu\\\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/world.edu\\\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\\\/\"},\"author\":{\"name\":\"Kevin\",\"@id\":\"https:\\\/\\\/world.edu\\\/#\\\/schema\\\/person\\\/42c1c1d5ff7ffbdf0bd50ed94c6ae6ee\"},\"headline\":\"What is credential stuffing and how can I protect myself? A cybersecurity researcher explains\",\"datePublished\":\"2024-01-19T05:12:03+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/world.edu\\\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\\\/\"},\"wordCount\":767,\"image\":{\"@id\":\"https:\\\/\\\/world.edu\\\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/world.edu\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/Credential-Stuffing.jpeg\",\"keywords\":[\"credential stuffing\"],\"articleSection\":[\"Science and Technology\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/world.edu\\\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\\\/\",\"url\":\"https:\\\/\\\/world.edu\\\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\\\/\",\"name\":\"What is credential stuffing and how can I protect myself? A cybersecurity researcher explains - World leading higher education information and services\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/world.edu\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/world.edu\\\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/world.edu\\\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/world.edu\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/Credential-Stuffing.jpeg\",\"datePublished\":\"2024-01-19T05:12:03+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/world.edu\\\/#\\\/schema\\\/person\\\/42c1c1d5ff7ffbdf0bd50ed94c6ae6ee\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/world.edu\\\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/world.edu\\\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/world.edu\\\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\\\/#primaryimage\",\"url\":\"https:\\\/\\\/world.edu\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/Credential-Stuffing.jpeg\",\"contentUrl\":\"https:\\\/\\\/world.edu\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/Credential-Stuffing.jpeg\",\"width\":680,\"height\":425},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/world.edu\\\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/world.edu\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What is credential stuffing and how can I protect myself? A cybersecurity researcher explains\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/world.edu\\\/#website\",\"url\":\"https:\\\/\\\/world.edu\\\/\",\"name\":\"World leading higher education information and services\",\"description\":\"Global Higher Education Jobs, University jobs, Lecturer & tenure jobs.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/world.edu\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/world.edu\\\/#\\\/schema\\\/person\\\/42c1c1d5ff7ffbdf0bd50ed94c6ae6ee\",\"name\":\"Kevin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1e8d491a5f9b9bf3db67c9e46abbba7bb06b26b458bd5025c55e0a4b9b60ea8a?s=96&d=mm&r=g8ba4c352a279c450aa9435d770c1ebf4\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1e8d491a5f9b9bf3db67c9e46abbba7bb06b26b458bd5025c55e0a4b9b60ea8a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1e8d491a5f9b9bf3db67c9e46abbba7bb06b26b458bd5025c55e0a4b9b60ea8a?s=96&d=mm&r=g\",\"caption\":\"Kevin\"},\"description\":\"Kevin is founder of the world.edu project. The past 28 years have been involved in publishing to the education sector in print and the internet. Kevin has a degree in Education and has a many years experience in developing companies and projects.\",\"sameAs\":[\"https:\\\/\\\/world.edu\"],\"url\":\"https:\\\/\\\/world.edu\\\/author\\\/kevin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What is credential stuffing and how can I protect myself? A cybersecurity researcher explains - World leading higher education information and services","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/world.edu\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\/","og_locale":"en_US","og_type":"article","og_title":"What is credential stuffing and how can I protect myself? A cybersecurity researcher explains - World leading higher education information and services","og_description":"Cyber-skulduggery is becoming the bane of modern life. Australia\u2019s prime minister has called it a \u201cscourge\u201d, and he is correct. In 2022\u201323, nearly 94,000 cyber crimes were\u00a0reported\u00a0in Australia, up 23% on the previous year. In the latest high-profile\u00a0attack, around 15,000 customers of alcohol retailer Dan Murphy, Mexican restaurant chain Guzman y Gomez, Event Cinemas, and […]","og_url":"https:\/\/world.edu\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\/","og_site_name":"World leading higher education information and services","article_published_time":"2024-01-19T05:12:03+00:00","og_image":[{"url":"https:\/\/world.edu\/wp-content\/uploads\/2024\/01\/Credential-Stuffing.jpeg","type":"","width":"","height":""}],"author":"Kevin","twitter_misc":{"Written by":"Kevin","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/world.edu\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\/#article","isPartOf":{"@id":"https:\/\/world.edu\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\/"},"author":{"name":"Kevin","@id":"https:\/\/world.edu\/#\/schema\/person\/42c1c1d5ff7ffbdf0bd50ed94c6ae6ee"},"headline":"What is credential stuffing and how can I protect myself? A cybersecurity researcher explains","datePublished":"2024-01-19T05:12:03+00:00","mainEntityOfPage":{"@id":"https:\/\/world.edu\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\/"},"wordCount":767,"image":{"@id":"https:\/\/world.edu\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\/#primaryimage"},"thumbnailUrl":"https:\/\/world.edu\/wp-content\/uploads\/2024\/01\/Credential-Stuffing.jpeg","keywords":["credential stuffing"],"articleSection":["Science and Technology"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/world.edu\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\/","url":"https:\/\/world.edu\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\/","name":"What is credential stuffing and how can I protect myself? A cybersecurity researcher explains - World leading higher education information and services","isPartOf":{"@id":"https:\/\/world.edu\/#website"},"primaryImageOfPage":{"@id":"https:\/\/world.edu\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\/#primaryimage"},"image":{"@id":"https:\/\/world.edu\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\/#primaryimage"},"thumbnailUrl":"https:\/\/world.edu\/wp-content\/uploads\/2024\/01\/Credential-Stuffing.jpeg","datePublished":"2024-01-19T05:12:03+00:00","author":{"@id":"https:\/\/world.edu\/#\/schema\/person\/42c1c1d5ff7ffbdf0bd50ed94c6ae6ee"},"breadcrumb":{"@id":"https:\/\/world.edu\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/world.edu\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/world.edu\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\/#primaryimage","url":"https:\/\/world.edu\/wp-content\/uploads\/2024\/01\/Credential-Stuffing.jpeg","contentUrl":"https:\/\/world.edu\/wp-content\/uploads\/2024\/01\/Credential-Stuffing.jpeg","width":680,"height":425},{"@type":"BreadcrumbList","@id":"https:\/\/world.edu\/what-is-credential-stuffing-and-how-can-i-protect-myself-a-cybersecurity-researcher-explains\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/world.edu\/"},{"@type":"ListItem","position":2,"name":"What is credential stuffing and how can I protect myself? A cybersecurity researcher explains"}]},{"@type":"WebSite","@id":"https:\/\/world.edu\/#website","url":"https:\/\/world.edu\/","name":"World leading higher education information and services","description":"Global Higher Education Jobs, University jobs, Lecturer & tenure jobs.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/world.edu\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/world.edu\/#\/schema\/person\/42c1c1d5ff7ffbdf0bd50ed94c6ae6ee","name":"Kevin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/1e8d491a5f9b9bf3db67c9e46abbba7bb06b26b458bd5025c55e0a4b9b60ea8a?s=96&d=mm&r=g8ba4c352a279c450aa9435d770c1ebf4","url":"https:\/\/secure.gravatar.com\/avatar\/1e8d491a5f9b9bf3db67c9e46abbba7bb06b26b458bd5025c55e0a4b9b60ea8a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1e8d491a5f9b9bf3db67c9e46abbba7bb06b26b458bd5025c55e0a4b9b60ea8a?s=96&d=mm&r=g","caption":"Kevin"},"description":"Kevin is founder of the world.edu project. The past 28 years have been involved in publishing to the education sector in print and the internet. Kevin has a degree in Education and has a many years experience in developing companies and projects.","sameAs":["https:\/\/world.edu"],"url":"https:\/\/world.edu\/author\/kevin\/"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/posts\/71411","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/users\/33"}],"replies":[{"embeddable":true,"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/comments?post=71411"}],"version-history":[{"count":2,"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/posts\/71411\/revisions"}],"predecessor-version":[{"id":71422,"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/posts\/71411\/revisions\/71422"}],"wp:attachment":[{"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/media?parent=71411"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/categories?post=71411"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/tags?post=71411"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/world.edu\/wp-json\/wp\/v2\/coauthors?post=71411"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}