According to Dr. Web, it spreads through USB disks and the internet, and Dr. Web has great solution to that problem:

"Dr.Web Office Control access restriction system: Restricts or completely prohibits access to Internet resources and removable devices, and therefore, excludes the possibility of a virus invading via those sources."

"Users should only have access to the local resources they require to perform their jobs. It's no use trying to convince staff that flash drives are dangerous. It is much easier to centrally disable access to such devices."

On one hand there are many open source software that are installed by piping a file into sudo; on the other the upside of open source is the ability to trace who tricked you into running that command.

> No information on how it spreads?

If they are clever they would attack via wordpress and other systems that are unpatched and give shell access.

"Once launched with administrator privileges" which is very difficult unless the soft goes out of its way to ask, and most open source software doesn't ask

I would guess it's privilege escalation (or that it logs in as a user and only affects that user's files)