It has become a common pattern that spam bots post some seemingly valid message that they edit to add malicious links a few days later (when people who monitor all new posts don’t read them anymore).
See for example these topics (spam posts are marked deleted and will disappear at some point):
There are two options to discourage these spam bots:
- Option A: Change minimum trust level for post editing from “0: new user” to “1: basic user” (see settings). Since trust level 1 can be earned by just browsing the site, it might not be very effective if spam bots are programmed to spend some time on the site.
- Option B: Reduce time limit for editing a post form the default 60 days to something like 1 hour (or maybe even 15 minutes). We would probably spot malicious links added soon after a new post is created. Spammers currently wait a few days.
Option B would be probably more effective, but it would impact all users. However, it may not be that bad to limit post editing to quick modifications right after posting anyway. So, I slightly prefer option B.