A type of Dictionary Attack, that attempts to access a system by trying a small set of commonly used passwords against a large number of usernames.

Best used when account lockout policies are enforced and the attacker aims to avoid detection by spreading attempts across multiple accounts.