Maybe spam attacks are so pervasive that what’s happening to us is just par for the course. I believe we use SSO, but it’s limited just to our site. We don’t use any external authentications. The pattern is very clear they always fill our “Gender” field with a random string of uppper and lower case letters. The username is almost always a “real” sounding first and last name followed by a string of numbers The email used is always some custom domain, usually very unusual looking. Never a popu...