Apparent spam received from iPhone

I just received a spam email originating from Brazil from a co-worker. In the email's header, it has this:

"X-Mailer: iPhone mail (10B350)"

Is this the smoking gun that shows that her phone is actually sending out spam? Or can an X-Mailer flag be spoofed as well?

I thought it was nearly impossible to infect iOS.