Seriously, this has been going on since yesterday. Cut and paste of legitimate earlier post headers, with malicious links. Now they are going to flood the board on a debate night. By design.
Deporting the new user accounts is like playing whack a mole. They just create a new account and come right back.
But it’s always the same two links, and they both lead to malware.
Build a blacklist filter into the new post portal, and add the two bad domains.
It will stop them cold.
worst case, apply a domain whitelist to new accounts