Unverified50% confidenceFactExact time
After a credential leak, attackers may lurk for a long time, move laterally, or resell the credentials on dark web markets.
1
Sources
50%
Confidence
Long-term
Relevance
10/17/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedPassword reuse means that a single breach on an unrelated platform can become an attacker's entry point into critical systems.76% similarUnverifiedAttackers can exfiltrate sensitive information out of the sandbox through legitimate outbound channels by embedding malicious code in dependency packages (supply chain attacks).76% similarUnverified勒索软件攻击者往往会在潜伏数周至数月后才触发加密程序，期间通过横向移动渗透备份系统、域控制器等关键节点75% similarUnverifiedAttackers holding forged certificates can conduct man-in-the-middle attacks, phishing and credential theft, and traffic hijacking.75% similarUnverifiedAPT attacks typically first gain an initial foothold through spear-phishing emails or supply chain vulnerabilities, then remain dormant within the network for extended periods and establish multiple backdoor channels.74% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1056207API
curl https://kongchang.com/api/v1/knowledge/claims/1056207MCP
get_claim(id=1056207)