Security experts are perplexed over a new spamming technique in which victims receive emails that appear to be coming from themselves.