So how do current versions get installed?
"Early versions of Lurk spread through an HTML iFrame on compromised websites that relied on a Flash-based exploit (CVE-2013-5330) in order to infect the computers of passing surfers."
How do current versions install? The stenography stuff is just for updates and commands after it's already installed.