Attackers are filling out and submitting web-based “contact us” forms, thus evading email spam filters.
Source: Threadpost