Password spraying is a brute force attack where the malicious Threat agent is trying to use already known passwords on multiple accounts and sites. This type of attack is effective because many users use easy to guess passwords or reuse the same password on multiple sites. Also affected are routinely reused initial passwords for new user accounts.

Sources:

• https://www.kaspersky.com/resource-center/definitions/what-is-password-spraying