Improving targeted password guessing attacks by using personally identifiable information and old password

Today's article comes from the journal of Cybersecurity. The authors are Ou et al., from Hainan University, in China. In this paper they're building a model that can guess your password. Their tool is called PassGLM, and in their tests it cracked nearly a third of target accounts within just a hundred guesses.

DOI: 10.1186/s42400-025-00430-0