They look at the passwords that are known to be popular from these stolen password sets, and they guess those first.
Eles olham para as senhas que são conhecidamente populares daqueles conjuntos de senhas roubadas, e chutam aquelas primeiro.