proposed new spamassassin rule

[waider]

IF ( message is from a postmaster-like address AND
    message contains a bounced mail AND
    bounced mail is positive for spam )
THEN
    NUKE THE GODDAMNED MAIL ALREADY
ENDIF

Might be worth checking for "You have a virus" mails, too.