Credential-stuffing attack uses proxies to hide bad behavior.