I have heard of issues like this as well, I also read that protecting the admin directory with an .htaccess / .htpasswd stops these types of attacks so that is what I did....but, yeah, its still a bit of a worry!!!