An international advisory says that the purpose of the “brute force” attacks is to sell the info to cybercrime forums.