having thought about it for 30 seconds...I believe it would be possible to replicate the attack from one machine to another. One you kick it off and attack one Mac. Then install the attack on that Mac, so that it now becomes the point of infection for the network...you take your laptop and go to another network...rinse repeat. Now as machines update they will be infected from other Macs on the network making it harder to trace who started the attack. Would that work?
I guess I was right, man-in-the-middle on the updater. It would be a pretty weak virus, not being able to expand itself beyond a LAN and requiring physical or trusted network access to that LAN to initiate. What does they group say, any think that would qualify?
Would that work?
If it did, I think we'd at least have seen a proof of concept, and maybe reports of compromise.