Credential stuffing attacks, attempts to compromise a large number of user accounts with stolen credentials, are a difficult problem to solve.