Credential stuffing is a type of cyberattack where attackers use automated tools to try large numbers of compromised username and password combinations to gain unauthorized access to accounts. These credentials are often obtained from data breaches and sold on the dark web.