They BCC using brute force method to known ISPs
e.g.
[email protected]
[email protected]
...
[email protected]
[email protected]
[email protected]
...
[email protected]
etc ad infinitum.
Simple and effective and as they tend to do it from hijacked mail servers by teh time teh isps complain they are long gone.