It’s been quite a week for Mac owners. And that’s all thanks to Flashback, a drive-by-download attack that requires absolutely no input by users in order to install itself on one’s Apple system. Visit a malicious website and that’s it: The code exploits a vulnerability in your Java runtime and begins to install other software components designed to yoink your login credentials and pass them off to a remote Internet servers.
Full Story: Flashback Central: How to Find, Protect Against, and Eliminate Scary Apple Malware