41% of all financial sector attacks between 2017 and 2020 were due to credential stuffing, the FBI says. The reuse of passwords and the lack of multifactor authentication pave the way for credential stuffing attacks. Cybercriminals and fraudsters obtain usernames and passwords that have been compromised through earlier breaches and then use botnets to try to match these credentials against existing bank accounts. The FBI Private Industry Notification says greater use of botnets enables cybercriminals to quickly hit many targets in search of credentials that work.”]
Source: https://www.cuinfosecurity.com/fbi-warns-credential-stuffing-attacks-on-rise-a-15075