Read the original source, it's just another malicious script that the user needs to run manually. Oh, it doesn't make use of any OS/kernel vulnerabilities either.

It's like putting "rm -rf /" in a script and calling it "malware".