The process of collecting usernames, passwords, and other authentication credentials through fake login pages, keyloggers, or social engineering. Harvested credentials are often sold on dark web marketplaces or used for account takeover attacks.
Related Terms
Keylogger
malwareSoftware or hardware that records keystrokes on a computer or mobile device. Keyloggers capture passwords, credit card n...
Password Manager
authenticationSoftware that securely stores and manages passwords in an encrypted vault. Password managers generate strong unique pass...
Phishing
phishingA cyberattack that uses fraudulent emails, text messages, or websites to trick people into revealing sensitive informati...