@virtulis I'm not sure how the targets are being selected, but I noticed that different people started receiving spam at different times. It had been singing around for at least days, for example, before I got the first one; but after that I got them regularly. Likewise the initial reports were distributed over time.
So it's definitely also not something as simple as "send to every user with >X followers"