Cybercrooks attempted credential-stuffing banks 3.5 BEEELLION times in the last 18 months alone

All going just as you'd expect, reckons Akamai

Content delivery network Akamai Technologies reckons that despite the time and effort spent convincing people not to fall for phishing and other frauds, the bigger threat might actually be credential-stuffing attacks."