Re: A brick in the wall
Yes security is more than just passwords, but passwords are pretty important.
Many places offer some form of remote access secured by ... the account password. And yes such services are regularly probed by password guessers.
As to targeting privileged accounts, I've seen a demonstration of someone escalating from a non-privileged account to domain admin in less than an hour. So no, attackers will quite happily target non-privileged accounts.