Hahaha…I got the scam mail a day or two ago and it prompted me to read this article. I already knew it was a scam.

Anyway, I think a good way to protect your website is to install Wordfence plugin (for wordpress users). I know it may not totally answer your security questions, but it has worked for me. Also have a good hosting company.

Thanks Sarah.