Analysis of 6 Billion Passwords Shows Stagnant User Behavior

Despite ongoing security efforts, users continue to use simple and default passwords like ‘123456’ and ‘admin’, leaving critical systems vulnerable. The report highlights the persistent risk posed by reused, predictable credentials in enterprise environments, often exploited by malware and threat actors. #Lumma #RedLine

Keypoints

Users still commonly choose weak passwords such as ‘123456’ and ‘password’ despite security warnings.
Default credentials like ‘admin’ and ‘password’ are frequently used for IoT devices and enterprise infrastructure.
Malware like Lumma and RedLine steal credentials that are often reused for malicious access.
Organizations still rely on passwords for legacy systems and high-risk identities despite adopting passwordless solutions.
Specops recommends layered security, continuous monitoring, and phishing-resistant MFA to mitigate risks.