The cyberattack that has robbed an unknown number of Australians of hundreds of thousands of dollars from their superannuation accounts began about a month ago, when the criminals tried to access millions of individual accounts armed with credentials that would let them in to a small percentage of them.
The attempts happened mostly in the dead of night, and relied on a subset of a branch of cyberattacks called brute force attacks, which is known as credential stuffing.