Welcome to the Q&A Forum

What you're describing sounds like registration spam, which can be a royal pain.  About two years ago spammers found a vulnerability in my CMS where they used bots to inject the spam into registration fields that ask for a user profile,  I ended up removing write access for the user profiles and added ReCaptcha for all registrations.   When it first happened my site had more than 8,000 bot registrations overnight. Good times!