Anna Kournikova (computer virus)

The worm was created by 20-year-old Dutch student Jan de Wit, who used the pseudonym "OnTheFly", on 11 February 2001.[2] It was designed to trick email users into clicking to open an email attachment ostensibly appearing to be an image of the professional tennis player Anna Kournikova, but instead hiding a malicious program. The worm arrived in an email with the subject line "Here you have, ;0)" and an attached file entitled AnnaKournikova.jpg.vbs.[3] When opened in Microsoft Outlook, the file did not display a picture of Kournikova, but launched a viral VBScript program that forwarded itself to all contacts in the victim's address book.[2]

De Wit created Anna Kournikova in a matter of hours using a simple online Visual Basic Worm Generator program written by an Argentinian programmer called [K]Alamar.[4] "The young man had downloaded a program on Sunday, February 11, from the Internet and later the same day, around 3:00 p.m., set the worm loose in a newsgroup."[5] The Anna Kournikova worm did not corrupt data on the infected computer, unlike the similar ILOVEYOU worm that struck a year earlier in 2000,[4] yet infected the computers of millions of users and caused problems in email servers worldwide.[6]

David L. Smith (the author of the 1999 Melissa virus, who was still serving his sentence), assisted the FBI in tracking down De Wit's identity.[7] De Wit turned himself in to the police in his hometown Sneek on 14 February 2001,[8] after he posted a confession to a website and a newsgroup devoted to the tennis player (alt.binaries.anna-kournikova), dated 13 February. He admitted to the creation of the virus using a toolkit, and said that his motivations were to see whether the IT community had developed better system security in the aftermath of previous virus infections. He also attributed blame for the virus's rate of spreading on Kournikova's beauty, and blamed those who opened the email, writing: "it's their own fault they got infected."[4]

A few days after the worm's release, the mayor of Sneek, Sieboldt Hartkamp, made a tentative job offer to De Wit in the local administration's IT department, saying that the city should be proud to have produced such a talented young man.[9]

De Wit was tried in Leeuwarden and was charged with spreading data into a computer network with the intention of causing damage, a crime that carried a maximum sentence of four years in prison and a fine of 100,000 guilders (then equivalent to US$41,300).[10] His lawyers called for the dismissal of the charges against him, arguing that the worm caused minimal damage. The FBI submitted evidence to the Dutch court, suggesting that US$166,000 in damages had been caused by the worm. Denying any intent to cause damage, De Wit was sentenced to 150 hours of community service.[10]

The 18-year-old Buenos Aires programmer who created the Worm Generator toolkit removed the application's files from his website later in February 2001. In an interview, he said that his friends had encouraged him to do so after hearing his pseudonym on television.[11]

• Comparison of computer viruses
• List of convicted computer criminals
• Timeline of notable computer viruses and worms