With this attack, scammers use password and username combinations that have already been stolen in details breaches and made available over the darkish web. They then use automatic program that enters these mixtures into gaming web sites for example Steam, Blizzard, or HumbleBumble.