A variation of the brute force password attack that attempts to narrow the range of possible passwords by using a list of common passwords and possibly including attempts based on the target’s personal information.