Hang on... I'll just check through my spam folder...not
Spam distro lists can be harvested from other emails or websites but can be created by 'brute force' as well. For example, if your email address was bosw @ someaddress.com (someaddress.com being a legitimate domain name), the spam generator will simply create a list of variations such as bows @ someaddress.com, boss @ someaddress.com etc. They might get a lot of bounces but they will also get a lot of hits.