Posted in Rare Mac Trojan exploits Apple vuln
Calm down calm down
A simple fix is to remove SetUID from the ARDAgent executable, viz-
sudo chmod -s /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAgent
To undo this, simply repair permissions on your machine.
