Password Attacks.pdf
- 1. 9 common types of password attacks YOU NEED TO KNOW Swipe for more www.mojoauth.com
- 2. 01 Dictionary Attacks The attacker uses a pre-computed list of words and phrases (known as a “dictionary”) to guess a password. To protect yourself from dictionary attacks, use strong and unique passwords for all of your accounts and regularly update your passwords to prevent them from being discovered. Swipe left www.mojoauth.com
- 3. 02 The attacker uses a program to systematically try every possible combination of characters until the correct password is found. To protect against brute force attacks, it is important to use strong and unique passwords that are long and contain a mix of letters, numbers, and special characters. Brute Force Attacks Swipe left www.mojoauth.com
- 4. 03 The attacker gains access to a database and uses a pre-computed table of hashes (the result of a one- way mathematical function applied to a password) to crack a password quickly. To protect against rainbow table attacks, it is important to use strong and unique passwords that are long and contain a mix of letters, numbers, and special characters. Rainbow Table Attacks Swipe left www.mojoauth.com
- 5. 04 The attacker uses psychological techniques to trick a user into revealing their password. This can be done through phone calls, emails, or in-person interactions. To protect against social engineering attacks, it is important to be skeptical of unsolicited requests for personal information and to verify the identity of anyone who asks for your password or other sensitive information. Social Engineering Attacks Swipe left www.mojoauth.com
- 6. 05 The attacker uses a program to try a single password against a large number of different accounts. To protect against password spraying attacks, it is important to use strong and unique passwords for each account, and to avoid using commonly used passwords Password Spraying Attacks Swipe left www.mojoauth.com
- 7. 06 The attacker gains access to a database and uses a pre-computed table of hashes (the result of a one- way mathematical function applied to a password) to crack a password quickly. To protect against rainbow table attacks, it is important to use strong and unique passwords that are long and contain a mix of letters, numbers, and special characters. Keylogger Attacks Swipe left www.mojoauth.com
- 8. Man-in-the-middle Attack 07 The attacker intercepts communication between the victim and a legitimate website. The attacker then acts as a “middleman” between the victim and the website, allowing them to capture the victim’s password as they enter it. To protect against Man-in-the-middle (MITM) attacks, it is important to use secure communication protocols, such as HTTPS, that encrypt the communication between two parties and make it difficult for an attacker to intercept and modify Swipe left www.mojoauth.com
- 9. 08 The attackers use stolen usernames and passwords to gain unauthorized access to user accounts on various websites and online services. To protect against these attacks, companies can implement measures such as rate limiting, which restricts the number of login attempts from a single IP address, and captcha verification, which requires users to prove that they are human before logging in. Credential Stuffing Swipe left www.mojoauth.com
- 10. 09 The attacker tricks users into providing sensitive information, such as passwords, by disguising the attacker as a trustworthy entity. To protect against phishing password attacks, it is important for users to be cautious when providing their password, and to never enter it on a website unless they are sure it is legitimate. They should also avoid clicking on links in suspicious emails, and instead go directly to the website in question by typing the address into their browser. Phishing Swipe left www.mojoauth.com