Take care to regularly update wordpress, some attacks on wordpress can send mail without postfix as describe in this post: