A hаcker tаrgets а user accоunt оn a website. Instead оf guessing passwords randomly, the hacker uses an automated tool that tries thousands of common words like “password123”, “admin”, “welcome”, and “qwerty” from a pre-made list. What type of attack is being used in this scenario?