Attackers feed files like "nordvpn--Freeuhqcombo.txt" into automated cracking tools. These bots rapidly test the credentials across NordVPN’s login pages. Because many people reuse the same password across multiple websites, a percentage of these logins inevitably work. 2. Account Checking and Sorting