They don't understand it. By the Arthur C. Clarke rule, it's equivalent to magic. When you challenge the powerful, you are guilty purely because you did something the average unsophisticated user isn't capable of.
Madness string 56518
Current theory is they are testing their botnet. Basically they are not succeeding at all, and we are confused why they aren't successful. Even throwing random passwords they should have a higher success rate. Their success rate is like <0.01%.