Once we have an explanation - correct or incorrect - we are complacent, at least for awhile.
Current theory is they are testing their botnet. Basically they are not succeeding at all, and we are confused why they aren't successful. Even throwing random passwords they should have a higher success rate. Their success rate is like <0.01%.