Assuming the attack is the same as what jhardcastle experienced, the email is propagated by sending emails to those who have received emails from the victim bef

Assuming the attack is the same as what jhardcastle experienced, the email is propagated by sending emails to those who have received emails from the victim before. Alternately, it would be a known sender sending you that email.