How about temporarily denying enrolling any new members and locking out the obvious bot user names? At least until a fix is in place.