They look at the passwords that are known to be popular from these stolen password sets, and they guess those first.
Guardano le password che sono popolari tra i set di password rubate, e provano quelle per prime.