There's actually a pattern of these accounts that look like they were once real people, who stopped commenting, and multiple years later were necromanced as a spam-zombie. You'll notice it clearly if you start looking at the histories of spammers after you [flag] them.
I've complained several times to the mods about it, so I'm sure they're aware too.
Is it too big a leap for me to assume someone is going around using password spraying or whatever to compromise neglected accounts for use as spam bots?
I've complained several times to the mods about it, so I'm sure they're aware too.