It is possible, but unlikely. It is common for spammers to use 'spoofed' return addresses on their spam, using domains that they have harvested from the Internet.
My guess is that your domain has been used in this fashion and you are reaping the end result of this.
As for catch-all addresses; Unless you have a good reason for having one active, they are generally a bad idea.
Save [color=#CC0000]$50[/color] on DreamHost hosting using promo code [color=#CC0000]SAVEMONEY[/color] ( Click for promo code details )