Tweet
Offline attacks represents a form of attack that is very effective and difficult to detect. These types of attack rely on the attacking party being able to learn how passwords are stored and then use this information to carry out an attack. Hashed or encrypted passwords are downloaded as-is in encrypted, hashed or any other form, and the attack is performed offline at the attackers location without any connections to the target system. When no active tasks are performed on the target system, no alarm bells will be set off. The only thing the victim has a decent chance of discovering, is the intrusion and download of the hashes.