We've had 10+ of these. Our cracked users can't say what it was they did to get cracked.
We HOLD: them with postfwd sender rate-limiting on our outbound mx. Never in the 1000s usually 100 to 150 per batch. Anybody know of any email that is a vector for this probable phish? Len