Yeah slow bruteforces are running all over the net all the time. This means there's no reason not to throw this attack into the mix.