attribution by password reuse

Often, threat actors will reuse distinct passwords in separate incidents. This allows analysts to provide loose attribution to separate incidents being perpetrated by the same group or individual actor.

---