Authentication & Secrets
Credential Stuffing
Also: password spraying with leaked logins
Trying email and password pairs leaked from one site against many other sites.
In more detail
It works because people reuse passwords. The attacker needs no cleverness, only a list and automation. Defences are unique passwords per site, multi-factor authentication, rate limits and checks against known-breached passwords.