Unverified50% confidenceFactExact time
Password spraying does not require breached data; it sweeps a large number of accounts with only a small set of common passwords, relying on users choosing weak passwords.
1
Sources
50%
Confidence
Long-term
Relevance
11/3/2026
First Seen
Sources
密码喷洒攻击：为何账户锁定策略形同虚设
Related Entities
Related Claims
UnverifiedPassword spraying's low-frequency, wide-net strategy can bypass the per-account lockout mechanisms that most enterprises rely on.76% similarUnverifiedCredential stuffing uses username-password pairs obtained from data breaches to attempt logins directly, relying on users reusing passwords across multiple services.76% similarUnverifiedPassword-type credentials only need to be stored as hashes for verification and do not need to be restored, so key hosting carries higher risk than password hosting.75% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1131496API
curl https://kongchang.com/api/v1/knowledge/claims/1131496MCP
get_claim(id=1131496)