Spam messages in Facebook

Can't really figure out how this is possible, even applications that you install shouldn't be allowed to send chat messages on your behalf.  Perhaps browser malware?

Any ideas, anyone?