This special issue of the “State of the Internet / Security” report focuses on the hundreds of millions of credential stuffing attacks that occur each day, especially those aimed at video, gaming, entertainment, and other media organizations. The report describes tools and tutorials available online at little or no cost to criminals seeking to exploit stolen username/password or email/password combinations, including All-in-One (AIO) applications such as SNIPR. It also looks at the thriving darknet marketplaces for stolen accounts, a virtual shopping mall for credential abuse attackers. Akamai security researchers also recommend methods to reduce the threat of credential stuffing attacks.