Captchas aren't as effective as you think.There is alot of services that provide solving the captchas (paid ofcourse but still,if an ICO want they can easily pay for it,doesn't cost much money)
Example of what I'm saying:2captcha.
The forum needs another solution for this.Maybe making a custom captcha for the forum(words arranging maybe?...) would counter this but not sure though.