Hacker News Reader

The term for this type of attack is credential stuffing.

https://www.owasp.org/index.php/Credential_stuffing

This comment shouldn't be downvoted. This is the correct term.

I don't think that the above comment means brute-forcing in the "try a million different passwords in a short time-period" sense, it's referring to finding a list of known password and email combinations and trying just those. I would expect that a few attempts wouldn't trip any brute-force alarms.

Especially if you use a few thousand proxies.

Not actually brute forcing individual ring accounts. They are just using previously leaked combinations