Yes, I think you are totally right.
Since I became aware of these MySQL hacks, I wrote code to detail these actions, and they are exactly about some real sick vermons out there trying to find vulnerability on a site to then engage in their MySQL injection, etc. attempts.