[Mimedefang] Greylist-busting ratware?

[WBrown at e1b.org]

mimedefang-bounces at lists.roaringpenguin.com wrote on 04/21/2006 02:05:52 
PM:

> I see this as a good thing.  You can tie the spam back to a 
> particular user.  They change their password, and the ratware is 
blocked.

Are the credentials really stolen, or is the ratware actually using the 
credentials that belong on the zombied computer.  I would bet the later. 
User changes password without cleaning off the infection and goes right 
back to sending spam.