[goles]

The term for this type of attack is credential stuffing.

https://www.owasp.org/index.php/Credential_stuffing

[grimmfang]

This comment shouldn't be downvoted. This is the correct term.