A few minutes ago two accounts on lemmy.ml started spamming pretty much every community on the instance with some crypto mining trash.

Moderators also noticed because all those posts are gone now, good job btw. Then I remembered, wait, doesn’t .ml have an application process to filter spam and bots? Out of curiosity, I went to have a look at the users profiles and both accounts were about two years old, with no activity.

Are these hacked accounts? Is that an easy thing to do? And how can one prevent it from happening?