13 ms·

At the end of the day most compromises that aren't state sponsored happen using low-tech methods like sim-swapping and spear phishing.

• bawolff 6y ago
  Honestly, that's the high tech end of what happens. Most compromises are credential stuffing.
  • twox2 6y ago
    Yeah, for sure. It's bizarre that it's not standard practice to just blocklist previously used credentials from already documented leaks.