You don't brute force it, you find the password for accounts with the same e-mail in leaks from other sites and try only those.