Password Attack and its Types (1)

1
PASSWORD
learntorise
ATTACK AND ITS TYPES
_at_infosectrain
2
www.infosectrain.com
learntorise
Hey Jerry, you know, the world of cybersecurity
can be pretty fascinating and also a bit
scary. Have you ever wondered how hackers try to
crack passwords and gain unauthorized access to
accounts?
Definitely, Tom! It's quite concerning how
passwords can be vulnerable to attacks. I've
heard there are different types of password
attacks. Do you know what they are?
3
www.infosectrain.com
learntorise
Absolutely, Jerry! One common type is a brute
force attack, where hackers try all possible
password combinations until they find the correct
one. It can be time-consuming but can work if the
password is weak or short.
That sounds time-consuming, indeed. Are there any
quicker methods?
4
www.infosectrain.com
learntorise
Indeed! There are dictionary attacks. Hackers try
common passwords or words against an account,
exploiting people's tendency to use easily
guessable passwords. That is why one must always
choose strong, unique passwords to stay secure!
Oh, I see. So, what if the password isn't easily
guessable?
5
www.infosectrain.com
learntorise
Well, hackers sometimes use a technique called a
"rainbow table attack." They have a precomputed
table of password hashes generated from many
possible plaintext passwords. These tables are
created in advance and can be quite extensive,
covering a wide range of possible passwords.
That's clever! But what if the hacker doesn't
have a precomputed table?
6
www.infosectrain.com
learntorise
In that case, attackers resort to credential
stuffing attacks. They use lists of usernames and
passwords obtained from previous data breaches
and try those credentials on other online
accounts, exploiting the fact that people often
reuse passwords across different platforms.
That's alarming. Are there any other methods?
7
www.infosectrain.com
learntorise
Absolutely, Jerry! Keylogging and shoulder
surfing. Hackers can secretly record keystrokes,
including passwords, or visually spy on people
entering their passwords.
Wow, those methods are sneaky! Is there anything
else we should be aware of?
8
www.infosectrain.com
learntorise
There's one more technique to mention social
engineering attacks. Hackers trick people into
sharing passwords through deception and
manipulation, posing as tech support or using
elaborate schemes.
That's quite scary. We need to be more cautious
with our passwords and take steps to protect
ourselves.
9
TIPS FOR
PASSWORD SECURITY
www.infosectrain.com
learntorise

• Set Strong Passwords
• Use Unique Passwords
• Enable Multi-Factor Authentication (MFA) Utilize
  Password Managers
• Regularly Change Passwords Educate Users
• Encrypt Passwords Account Lockout Policies Use
  HTTPs
• Regular Security Updates

10
FOUND THIS USEFUL?
Get More Insights Through Our FREE Courses
Workshops eBooks Checklists Mock Tests
LIKE
SHARE
FOLLOW