As of late last night, a developer has published a fix which for the time being has knocked this problem on the head.
Of course, once the bot designers catch up, it's possible that it will start up again, but for now I think we can stall on implementing the email logins.
This problem is now affecting all sorts of forums, not just SMF ones - fight the spam!