We bought a stash of USB keys at a major transit authority's Lost Property auction, and took a look at the sort of information people leave on the train.
We didn't find any OS X malware. But nine of the keys appeared to belong to Macintosh owners (or at least had been used extensively on Macs); seven of these were infected.
GM: Read more, very interesting...