.
You are running Mailman 3, which has several malicious user mitigation strategies available to it.
Even using a CAPTCHA on subscription removes most of the scum.
I've not used MM3 - still on MM2 - so I can't help directly, but the <mailman-users@mailman3.org> mailing list is where I would start.
Cheers,
Gary B-)
This wont overcome the problem of those actual vermin who subscribe with sole intentions of spamming or abusing the list, Pablo's idea of new user moderation is the closest workable solution.
I neither have played with MM3 or this hyperkitty thing, but seems it has flaws that are not helping.
Regards,
Noel Butler