If you are running any version of MovableType, you need to install the newly released patch which closes a hole that “malicious users to send email through the application to any number of arbitrary users.” If you do not want to mess with a full upgrade, just install the plugin. It took me less than three minutes to download and install it on my MT site. A simple fix to a giant problem.