Saw recently an account that belong to a developer that was being used for scamming those links.So its very possible that those accounts you see spamming those scam links are from victims that got hacked.
