gcdRadar

credential-stuffing

1 live · 2 on record · last incident 2 days ago

Dec ’25records per month, by first reportNov ’26

Live1

  1. live
    Credential stuffing campaign spoofs consumer AI agent traffic

    Breaches & attacks · Exploited · since Oct 2026 (approx.)

    Attackers launched a bulk credential stuffing operation disguised as a consumer AI agent, generating hundreds of thousands of sign-in page visits. The automated traffic attempted unauthorized logins using stolen credentials before failing.

    AI

Earlier1

  1. closed
    OpenAI bots Attacker Scans for Credentials by Impersonating AI Bots

    Breaches & attacks · Exploited · since 28 Oct 2026

    AI