I found out where these spammers are getting their profiles from, they are all on this website which has an api for generating fake names and images of people, they have this connected to a bot that generates npubs with these names and photos then replies to people.

https://randomuser.me/photos

This post and comments are published on Nostr.