The legendary Handler's Diary from ISC has an insightful and even funny story on a rootkit discovery set in a James Bondish setting. Note that ISC also suggests that Firefox users should update their browser to 1.0.7 due to vulnerabilities. We definitely second that!