It's a weak point in security when object deeded to group can send instant messages to avatars. You cant block such spam because you see only group name as object owner. While you jump to spamming prim it can selfdelete... And spammer can use several avatars to rez and deed prims. So it would be good if adding group by UUID in a block list would stop spam from deeded objects.