Many of them, but sometimes they manage to get email addresses which are protected by various contrivances (e.g. in a web page, having the webmaster's address appear as a .gif). I guess they could be using an smtp intercept, though that would be sorta evil.
Still, I have a strong suspicion much more money is being made in the spam business than is being made in any other business by spamming.