>Seems to me that this is a matter for law enforcement agencies, actually.
>Is it easier to track users of mailing lists than individual e-mails or can
>Mr. "Garcia" get away without punishment?

I imagine that Mr. Garcia might be someone who was himself infected.