More than 60% of passwords are cracked by AI in less than 60 seconds
Passwords are often created by users as plain text, then hashed to create a string of characters that is nearly impossible to read or reverse. To detect passwords, hackers often use the brute-force method (brute-force attack), which means testing character strings until they find the password. According to Kaspersky research, about 23% of passwords can be detected in under 60 seconds this way, 9% can be cracked in 1-60 minutes.
However, in the context of AI developing and being used for malicious purposes, attackers can build their own AI models to improve the ability to guess and even reverse passwords encoded into original characters. First, take advantage of previously exposed passwords. For example, these models will use the data source of 10 billion passwords leaked in July to detect passwords.
The AI research team at Kaspersky trained an AI model to analyze leaked passwords. As a result, about 32% of passwords can be recovered from hashed form in less than 60 minutes.
When running the AI application on RTX 4090 GPU hardware and the MD5 hash function at a speed of 164 billion hashes per second, the results were that about 61% of passwords were cracked in just 60 seconds and 17% were cracked in 1- 60 minutes, three times higher than the old brute-force method.
Statistics of password cracking rates over each period of time between Kaspersky's brute-force method and AI application (right). Screenshot
The user's habit of setting passwords using related characters or common character strings such as "admin", "password", "qwerty12345", "nguyen". is one of the factors that makes it easy for AI to crack. .
Experts recommend that users should set long passwords, containing letters, numbers, special characters, or use a random password generator to reduce the possibility of being cracked.
In the context of AI being increasingly applied in life and work, attackers also have many new methods.
AI is a powerful tool that is increasingly being applied in life and work, but bad guys can also use it for bad purposes such as writing malicious code, automating attacks, and creating social engineering attacks. on the user.
You should read it
- How can Windows passwords be cracked - Part 1
- How can Windows passwords be cracked - Part 2
- How to retrieve a Tik Tok password when it is lost
- How to remove PDF file password
- Check the security of the password
- Use an 8-character Windows NTLM password? Congratulations, your password may be unlocked after only 2.5 hours
- 5 best password management apps for iOS
- Has your password been leaked? Please check now
- How to Remove the Password from a Zip File Without Knowing the Password
- Unlock WEP Wifi password with Backtrack
- Set a password for the USB
- 5 steps to remove PDF password online
Maybe you are interested
Create passwords for apps and games on iPhone 6, 5s, 5
Why should you store passwords in Bitwarden?
How to manage saved passwords on Microsoft Edge: View, delete, edit, export
How to sync passwords in the iPhone Password app
10 billion passwords leaked
Here's how iOS 18 makes sharing Wi-Fi passwords between iPhone and Android easier