[discostu]

Yeah people get that popup and provide their password without bothering to find out what they’re allowing. The biggest security hole is always the people, that’s why trojans are the most successful form of malware, the hole a virus uses will eventually get patched, there is no patch for the click happy human hole.

[cartan]

As the article explained, the malware installed itself even if you didn’t supply the admin password. It would install itself under the user account then.

[for-q-clinton]

From the Article:

“Later versions of the malware exploited weaknesses in the Java programming language to allow the code to be installed from bogus sites without the user’s permission. “