Today there were few new spam posts made to shill cryptocurrency and as I banned first the accounts and deleted the post I noticed that by banning one account I simulateneously had banned 13 more with the same IP address. As I took closer look I noticed that these were all bunch of accounts created varying times, some were very old from all the way from 2011, some were more recent and as it's unlikely somebody would have been registering bot accounts back in 2011 to start posting in 2023 it likely means some outsider has gotten access to them.
I checked the affected accounts with
https://haveibeenpwned.com and most of them had been in databreach (worst ones multiple times!) elsewhere so it seems likely that the users had simply used...