Bumping this one.
We have evidence of a password stuffing attack that's turned a bunch of our dormant accounts into spambots.
Xenforo really needs this feature. Users are setting weak passwords that are easily cracked and these accounts can slip right under our spam system.