How hackers exploit password patterns

Share post:

According to Specops research, hackers have begun to exploit how human minds instinctively spot patterns, even in password creation. They are circumventing password rules by making informed guesses.

Using common base terms is one of the most prevalent password flaws that hackers exploit. A base term is a common word or phrase used in passwords.

The 2023 Specops Weak Password Report examined 4.6 million passwords gathered over many weeks, as well as those used in live assaults to attack RDP ports. ‘Password’ was claimed to be the most popular base term.

Hackers are aware of this, thus they frequently attempt to guess passwords that begin with or include popular base terms.

Another is the usage of short passwords which are easier to guess than long passwords. According to Specops data, 88% of passwords used to target RDP ports in live attacks are 12 characters or fewer.

Many businesses simply enforce a password length of eight characters via Active Directory settings. It adds that if a user is offered the choice of creating a shorter password, they will choose it.

The hackers also employ keyboard walk patterns, which are character sequences that are simple to write. “QWERTY” is a keyboard walk pattern, for example. Hackers are aware of this, thus they frequently attempt to guess passwords that match keyboard walk patterns. Reusing passwords is the fourth password error that hackers exploit. This allows the hacker to get access to other accounts that use the same password.

To reduce these dangers, Spacecops advises customers to utilize a password manager to establish and maintain strong, unique passwords for all of their accounts. In addition, they should avoid utilizing popular basic keywords in their passwords.

The sources for this piece include an article in BleepingComputer.

Featured Tech Jobs


Related articles

Cyber Security Today, April 24, 2024 – Good news/bad news in Mandiant report, UnitedHealth admits paying a ransomware gang, and more

This episode reports on the danger of using expired open-source packages, a tool used by a Russian hacking group and passw

Google Play introduces new biometric verification with a user warning

Google has recently announced updates to the biometric verification process for Google Play purchases, aiming to bolster security...

Cyber Security Today, Week in Review for week ending Friday April 19, 2024

On this episode Jen Ellis, co-chair of the Ransomware Task Force, talks about ways of fighting one of the biggest cyber threats to IT d

Cyber Security Today, April 19, 2024 – Police bust phishing rental platform, a nine-year old virus found on Ukrainian computers, and more

This episode reports on a threat actor targeting governments in the Middle East with a novel way of hiding malware is going international

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways