Retailers and streaming services are battling a massive wave of credential stuffing attacks, with security firms tracking billions of automated login attempts against consumer platforms over the past month.
The attacks rely on combolists compiled from years of data breaches, exploiting the widespread habit of password reuse. Successful takeovers have led to loyalty-point theft, fraudulent gift card purchases and resale of premium accounts.
Several platforms have responded by enforcing multi-factor authentication and deploying bot-detection systems, though attackers increasingly route traffic through residential proxy networks to evade blocking.
Security experts reiterate that unique passwords and authenticator apps remain the most effective consumer defenses, while platforms are urged to check credentials against known-breach corpuses.
