A type of brute-force dictionary attack used to hack computer systems and online services. In credential stuffing, instead of common username/password combinations, cybercriminals use real credentials stolen from a third-party resource. The cybercriminals count on the fact that many people use the same credentials for different online accounts.