Credential Stuffing

A collection of stolen login credentials from one service is used to attempt to break into accounts on other services

Password Spraying

Using a single password against multiple accounts on the same application