Intelligence
What is Combolist?
A text file of email or username and password pairs, compiled from breaches and stealer logs, used for credential stuffing.
A combolist is a list of login pairs, usually email:password or username:password, compiled from data breaches and stealer logs. Combolists are shared and sold on forums and Telegram channels.
They are the fuel for credential stuffing. For defenders, checking whether company addresses appear in fresh combolists can identify accounts that need a forced reset.