do attackers wait to use passwords months after they've compromised those passwords? or, do they give themselves other ways to maintain their access so that no passwords stand in their way from that point on?
it's the latter, not the former. once you're compromised, passwords, changed or not, are no longer an obstacle at all.
it's the latter, not the former. once you're compromised, passwords, changed or not, are no longer an obstacle at all.
password rotation does not increase security.