Chris Morales, head of security analytics at Vectra, said that the password spraying is a highly opportunistic technique that continually works because passwords are commonly reused across multiple services.