Anna Kournikova (computer virus) explained

Fullname:Anna Kournikova
Type:Computer virus
Origin:Sneek, Netherlands
Author:Jan de Wit
Language:VBScript

Anna Kournikova (named Vbs.OnTheFly by its author, and also known as VBS/SST and VBS_Kalamar)[1] was a computer virus that spread worldwide on the Internet in February 2001. The virus program was contained in an email attachment, purportedly an image of tennis player Anna Kournikova.

Background

The virus was created by 20-year-old Dutch student Jan de Wit, who used the pseudonym "OnTheFly", on 11 February 2001.[2] It was designed to trick email users into clicking to open an email attachment, ostensibly an image of Russian tennis player Anna Kournikova but instead hiding a malicious program. The virus arrived in an email with the subject line "Here you have, ;0)" and an attached file entitled AnnaKournikova.jpg.vbs.[3] When opened in Microsoft Outlook, the file did not display a picture of Kournikova, but launched a viral VBScript program that forwarded itself to all contacts in the victim's address book.[2]

De Wit created Anna Kournikova in a matter of hours using a simple online Visual Basic Worm Generator program written by an Argentinian programmer called [K]Alamar.[4] "The young man had downloaded a program on Sunday, February 11, from the Internet and later the same day, around 3:00 p.m., set the virus loose in a newsgroup."[5] The Anna Kournikova virus did not corrupt data on the infected computer, unlike the similar ILOVEYOU virus that struck a year earlier in 2000,[4] yet infected the computers of millions of users and caused problems in email servers worldwide.[2]

Conviction

David L. Smith (the author of the 1999 Melissa virus, who was in FBI custody at that time) assisted the FBI in tracking down De Wit's identity.[6] De Wit turned himself in to the police in his hometown Sneek on 14 February 2001,[7] after he posted a confession to a website and a newsgroup devoted to the tennis player (alt.binaries.anna-kournikova), dated 13 February. He admitted to the creation of the virus using a toolkit, and said that his motivations were to see whether the IT community had developed better system security in the aftermath of previous virus infections. He also attributed blame for the virus's rate of spreading on Kournikova's beauty, and blamed those who opened the email, writing: "it's their own fault they got infected."[4]

A few days after the virus release, the mayor of Sneek, Sieboldt Hartkamp, made a tentative job offer to De Wit in the local administration's IT department, saying that the city should be proud to have produced such a talented young man.[8]

De Wit was tried in Leeuwarden and was charged with spreading data into a computer network with the intention of causing damage, a crime that carried a maximum sentence of four years in prison and a fine of 100,000 guilders (then equivalent to US$41,300).[9] His lawyers called for the dismissal of the charges against him, arguing that the virus caused minimal damage. The FBI submitted evidence to the Dutch court, suggesting that US$166,000 in damages had been caused by the virus. Denying any intent to cause damage, De Wit was sentenced to 150 hours of community service.[9]

The 18-year-old Buenos Aires programmer who created the Worm Generator toolkit removed the application's files from his website later in February 2001. In an interview, he said that his friends had encouraged him to do so after hearing his pseudonym on television.[10]

See also

Notes and References

  1. Web site: Alijo. Hernan. Purported 'Anna' virus toolkit author yanks files from site. 24 October 2020. ZDNet. en. 9 August 2020. https://web.archive.org/web/20200809144445/https://www.zdnet.com/article/purported-anna-virus-toolkit-author-yanks-files-from-site/. live.
  2. Web site: Memories of the Anna Kournikova worm. Cluey. Graham. Naked Security - Sophos. 11 February 2011. 9 February 2018. 10 February 2018. https://web.archive.org/web/20180210062220/https://nakedsecurity.sophos.com/2011/02/11/memories-anna-kournikova-worm/. live.
  3. Web site: 13 February 2001. Kournikova computer worm hits hard. BBC News. 23 May 2009. 13 May 2016. https://web.archive.org/web/20160513105325/http://news.bbc.co.uk/2/hi/science/nature/1167453.stm. live.
  4. Web site: 14 February 2001. Confession by author of Anna Kournikova worm. Out-law news. 23 May 2009. 3 March 2016. https://web.archive.org/web/20160303183928/http://www.out-law.com/page-1387. live.
  5. Web site: 14 February 2001. FBI probes worm outbreak after "Anna" arrest. CNET news. 23 May 2009. Robert Lemos. en. 24 October 2012. https://web.archive.org/web/20121024182604/http://news.cnet.com/2100-1001-252579.html. live.
  6. 18 September 2003. Court documents reveal that Melissa's author helped authorities catch other virus writers. Sophos. 10 May 2009. 12 October 2016. https://web.archive.org/web/20161012181518/https://www.sophos.com/en-us/press-office/press-releases/2003/09/va_smithfbi.aspx. live.
  7. Web site: 13 September 2001. Maker of Kournikova worm stands trial. NetworkWorld. IDG News Service. 10 May 2009. Joris. Evers. dead. https://web.archive.org/web/20110615003400/http://www.networkworld.com/news/2001/0913annavirus.html. 15 June 2011.
  8. 19 February 2001. Kournikova worm author should not be rewarded. Sophos. 10 May 2009. 26 April 2009. https://web.archive.org/web/20090426023900/http://www.sophos.com/pressoffice/news/articles/2001/02/va_kournoreward.html. live.
  9. Web site: 27 September 2001. Kournikova virus kiddie gets 150 hours community service. The Register. 10 May 2009. Robert. Blincoe. https://web.archive.org/web/20090406222400/https://www.theregister.co.uk/2001/09/27/kournikova_virus_kiddie_gets/. 6 April 2009. live.
  10. News: Purported 'Anna' virus toolkit author yanks files from site . Alijo . Hernan . 16 February 2001 . . 9 February 2018 . 9 August 2020 . https://web.archive.org/web/20200809144445/https://www.zdnet.com/article/purported-anna-virus-toolkit-author-yanks-files-from-site/ . live .