Comment on Beware New WordPress Security Theat: The WordPress Misinformation Virus by Fouad.
Important article. I agree totally. I started with blocking IPs, and later I canceled that for the reasons that you mentioned in your article.
Recent Comments by Fouad
Automatically Block XML-RPC Brute Force Amplification Attacks Against WordPress
I’ve had to change the XML-RPC file name across FTP every time wordpress was updated..now it is really simple..