Hackers will find any mail server that is not protected and/or configured correctly and use it to send out as much spam as possible. This gets the unsuspecting organization blacklisted and all its mail blocked. This happened in Canada and it is a major hassle. How did the hacker do it? Social Engineering. He sent a targeted email to teachers and two fell for it. That was enough.