We've been slammed with the same issue these guys are discussing
https://xenforo.com/community/threads/spammers-posting-through-existing-accounts-with-no-need-to-login.211713/
Is there an UPDATE query that can mass change the users' passwords, WHERE their last activity s before a certain date...