Seems to rely on poor passwords…  any ideas as to what the point may be?  Read articles from The Register and F-Secure.  Let us know your thoughts.