I just saw a new Spam tactic today.

They sent a Spam to an obvious wrong email address and used my address in the return path, so the Spam bounced and was sent to me as an attached message with an actual server message saying the user cannot be found. Open the attachment and it is a blind dating Spam message. Spam Assasin did not pick it up as Spam, guess it does not read attached messages?