http://news.cnet.com/8301-1009_3-57507648-83/spam-from-friends-is-actually-result-of-facebook-hole/
Spam from 'friends' is actually result of Facebook hole
Facebook has fixed the problem and says spammers are using friend lists they scraped before the fix to send new e-mails.