What's the goal of a "Find my iPhone" attack? Ransomware?

Also puzzled that the attacker manages to guess the victim's password (described as complex). In my experience, 3 incorrect login attempts on iCloud block the site for a while.

Is there more to this story?