A new wave of malicious spam relies on requests for delivery confirmations for unsolicited emails.