I used to work for an abuse (anti-spam) department. I used to think that Facebook had incredibly good counter-spam operations.

These days, not so much. One particular spammer (whoever is behind the "Facebook Gold Account" spam) is absolutely nailing them. He'll use a fake profile to create a group, then spam people with a group that advertises a "who viewed your profile?" tool, or a gold account, or some other ridiculous thing. These people will then copy and paste a javascript command which auto-invites all of their friends to that group, and the cycle continues. (Of course, you also have to do an IQ quiz to get your gold account...).

Every time I've seen one of these groups, it has in excess of 150,000 people who have already joined the group, which was created only a few days ago.

Whoever came up with this spamming method is probably rolling in dough -- unless Facebook can pressure his affiliate into giving him up or dropping him.