According to Verizon’s 2020 Data Breach Investigations Report, hacking, which includes brute forcing passwords, remains the primary attack vector. Over 80% of breaches caused by hacking involve brute force or the use of lost or stolen credentials.
A brute-force attack (also known as brute-force cracking) is a method of trying every possible password until the right one is found. These attacks are done by brute force, meaning they use excessive forceful attempts to force their way into private accounts. This attack method is old but still effective and popular with hackers. Gaining access to a valid account can mean compromising the entire site, which bad actors can then use as part of their network of compromised websites.