Someone just uploaded a password-hacking tool called iDict to GitHub. The tool promises to use all the good old brute force techniques to break iCloud passwords.
Tool developers also argue that they can avoid the two-factor authentication constraints of Apple, supposedly blocking brute force attacks.
Its capabilities iDict limited by the size of the dictionary it uses to guess your passwords. It uses a list of 500 words but this can be changed by someone with the necessary knowledge. The codes are in one archive txt located in the path iDict-master\files\wordlist.txt
All passwords they use meet their password prerequisites iCloud. So check the tool and if you see him code change it immediately. You should also enable two-factor authentication on all your accounts as an additional security measure.
The installation tool and instructions are on GitHub.