Have you recently opened an e-mail taking you to a bogus (but genuine looking) site that required your signon and password? It does happen, even to the most wary of us.
The spammer can now through your signon, send tons of spam to you and others until your ISP shuts down your account. Happened to me this summer.