Thanks for the advice guys. Very much appreciated.
I thought we got out of the above the fold algorithm hell when traffic suddenly spiked up, only to see all of it come from Bangladesh and the eCPM correspondingly decreased to levels we've never ever seen before :o(
We've banned the relevant IP addresses and secured our databases. Hopefully it will stop soon