Saw many threads about this, they are basically sending links which leads to java driveby. By clicking run applet, you are basically infected. Therefore you get hacked on runescape and other.
Note to admins: pm me their ips or release it here so we can boot them