It definitely is. Just like bots scanning the web for server exploitations. If money can be made/extracted from it, you can bet that there are bots trying to exploit that.
However, domain transfers should be safe if done correctly. Sounds like that was not the case for you. Glad to know that it was resolved. Domain name takeovers can be very costly to recover from; if recoverable at all.