I have a website with a node and comments which are moderated. I have installed Cache module, Image captcha (light distorsion). There was no spam till a few months ago. I installed Honeypot module and the few messages (probably automated) stopped being entered into the moderation list.
This week the site suffered a massive amount of flood spam. This coincides with the attack which is explained in Drupal.org. Is it possible that the attackers have learned how to override Honeypot and Image Captcha countermeasures?
How can I improve the security so the spam is reduced? My client will not allow more than a very small human input to delete a few spam messages.