How does Badspot know these accounts have been compromised?
•because they all spammed multiple topics with 999999 width images
•because they all had the same signature
•because it all happened at the same time
•because they were all accessed by the same IP to make those spam posts (in theory, at least. It's more than likely, but only badspot can confirm this.)