Given that every new spam user posts about 3 pages and then stop, I would say that bots hacked the CAPTCHA algorithm.
I think we should make registration harder and then we will be fine.
I suggest we use Google's nocaptch ReCaptcha, it's not only using hard problems to solve, but also browsing history & browser fingerprint and more to stop bots.
