Credential harvesting attacks can take many forms, depending on what credentials were compromised and how the hacker intends to monetize them. The most common attack uses “credential stuffing” to try to use the compromised username/password combination on thousands of popular websites. So, if you are using the same username/password on a compromised site as you are for online banking, the attack could give the hackers access to your money. Credentials are also used in many other social engineering attacks