Comment by jeffbee

TL;DR They found an open relay included in many SPF records.