All iPhone and Android users must change settings over easy ‘stuffing’ attack that preys on common mistake to hack you

SMARTPHONES owners are being warned over a type of cyber-attack that preys on a painfully common password mistake.

The attack is called “credential stuffing”, and cybersecurity experts say it’s easy to avoid – but too few people are using the right settings.

It exploits bad password habits, and strikes multiple accounts at once.

Now cybersecurity giant Kaspersky is warning users over how the attack works – and what you need to do to stay safe.