Forget about 12345 or P@ssW0rd, an Avira honeypot identified an even more insecure credential… nothing. “The most commonly used credential is blank, which means that the attackers just enter an empty username and password,” says Avira threat analyst Hamidreza Ebtehaj. “This is even more common than admin.” Credentials in this case are a two-part combination