New Flashback Variant Continues Java Attack, Installs Without Password
Intego has discovered a new variant of the Flashback malware, Flashback.S, which continues to use a Java vulnerability that Apple has patched. No password is required for this variant to install,
http://www.intego.com/mac-security-blog/new-flashback-variant-continues-java-attack-installs-without-password/