The credentials are being advertised on both the dark web and publicly available online forums, the FBI said in an alert.
“The exposure of usernames and passwords can lead to brute force credential stuffing computer network attacks,” where attackers try to use the same login combinations across multiple sites, the FBI said.