The automated injection of breached username/password pairs in order to fraudulently gain access to user accounts.
OWASP Foundation. (2021). OWASP Top 10:2021. https://owasp.org/Top10/