Hello,
I had a similar problem and I found out that the problem are the bounce mails from MAILER-DAEMON.
So, spam was sent to not existing mail boxes and the MAILER-DAEMON tries to return a bounce message. As the sending mail address is forged, this bounce can't be sent, so the mail stays in...