The attacker downloads a "combo list" (a text file containing email:password ). These combos come from data breaches of other websites (e.g., LinkedIn, Adobe, MySpace). Since users reuse passwords, these combos work on PSN.
For security professionals, studying these configs is vital to understanding how API abuse works. For the average gamer, the existence of these configs should be a wake-up call to enable 2FA immediately. psn config openbullet
The attacker loads the config into OpenBullet, loads 500,000 combos, loads 10,000 proxies, and hits "Run." The attacker downloads a "combo list" (a text