Java-based Trojan For Mac OS X Discovered
 

When the link is accessed, the trojan starts to execute itself as a Java applet which is somehow capable of bypassing Mac OS X's built-in sandboxing protection scheme. SecureMac did not elaborate on how the applet was able to do so, but the company stated that upon gaming access to the Mac, the trojan will download a list of files and and installer, which launches automatically. And when the installer runs, it proceeds to install modified versions of the OS X system files disables OS X's password verification, thus allowing all forms out external access into the system.

http://vr-zone.com/articles/java-bas...red/10168.html