Was wondering if anyone else has seen this type of activity on any of the projects they have worked on, and/or know what is going on.
My friends and I have a small community site for content creators to discuss news (think of it like hn but for content creators specifically)[0].
Recently, I have seen a ton of accounts being registered with our email and pw option (the only option). This was very strange considering we are a really small community, and most of our registrations are high quality people at a slow rate through word of mouth. After looking into it, I noticed that all the accounts had usernames like "jDwJeVTQEaP" with a variety of @gmail and @yahoo email's associated to them. There have been 100s of them registered over the course of a week.
These accounts have no activity, mostly because they cannot log in due to needing to be verified via email first. So these accounts are pretty much just shells.
So I am trying to understand what the point of all this is for the account creation spammer? What would you do in my situation to mitigate this?
[0] https://www.cbx.gg/