[MHillyer]

Actually it's usually just accounts the spammer signed up for that purpose. It's so easy to get an account that there's no point bothering to steal credentials.