It would appear that as this malware infects the last four recently run applications rather that the system, it could be possible that no authorisation would be required if logged in with an administrator account.
http://www.macfixit.com/article.php?...60217093242914