All use same pre-ANN template. Even the subjects are 99% same, just change of a buzz word. Got a message deleted when informing about this in one of the threads, I've seen other messages deleted too.
They all have wallet software to download for win and linux. Everything is pretty much the same:
So my guess is that they have software with backdoor, and try to spread this to eager miners that will install wallet on unsecure computers, just to be ready for mining. When installed, they probably scan for wallets and take them if possible.