I recall hearing about this a month+ ago. If it's the same, the issue is in the Apache install that has a exploit being taken advantage of.
Will see if I can find the details, but internet is really bad right now.
text Search for "apache" here:
https://www.grc.com/sn/sn-398.txt
and you can find the video here:
http://twit.tv/show/security-now/398
If you are not running apache, then obviously disregard!