Scripted spam attack via user registration

One of our sites has been hit by a scripted spam attack aimed at inserting malware links into user profiles via automated registrations. It appears that all of the fake accounts are using a series of mailboxes @spam.ru, and I'd recommend anybody with a Drupal system block registrations using that domain for email addresses.