Bulk of 2004's virus infections pinned on one man

Randall rvh40 at insightbb.com
Mon Aug 2 12:37:02 PDT 2004

(And he may even be guilty!)


Bulk of year's PC infections pinned to one man
By Munir Kotadia
Special to CNET News.com

Story last modified July 28, 2004, 2:08 PM PDT

Sven Jaschan, self-confessed author of the Netsky and Sasser viruses, is
responsible for 70 percent of virus infections in 2004, according to a
six-month virus roundup published Wednesday by antivirus company Sophos.

The 18-year-old Jaschan was taken into custody in Germany in May by
police who said he had admitted to programming both the Netsky and
Sasser worms, something experts at Microsoft confirmed. (A Microsoft
antivirus reward program led to the teenager's arrest.) During the five
months preceding Jaschan's capture, there were at least 25 variants of
Netsky and one of the port-scanning network worm Sasser.

Graham Cluley, senior technology consultant at Sophos, said it was
staggering that one person could be responsible for so many infections.
Richard Starnes, president of security industry group ISSA UK, was also
impressed: "Is he going to put this on his CV?" he asked.

Cluley said there is still a chance that others may be implicated in the
Netsky virus, although so far no one else has been arrested.

"The full story of the Netsky gang isn't known yet. We know some of his
fellow students have been questioned, but the real motives are not fully
known," said Cluley.

According to Sophos, the Sasser worm came out on top with 26.1 percent
of infections, while Netsky.p, Netsky.b and Netsky.d take second, third
and fourth places respectively. The only non-Jaschan viruses in the top
10 are MyDoom.a (fifth place), Zafi.b (sixth place), Sober.c (ninth
place) and Bagle.a (tenth place).

"Sasser may have taken top spot, but six of the biggest viruses of the
last six months were Netsky and Bagle variants--these caused a continued
nuisance for PC users the world over as their authors entered into a
very public game of virus writing one-upmanship," said Cluley.

Starnes said that although Jaschan has been arrested, there are always
other people willing to step into his shoes.

"Virus writers tend to grow out of the hobby, but hackers do not tend to
stop. There is a high turnover rate in the virus-writing community.
There will always be somebody there to step in to fill the gap," he

Cluley agreed, but pointed out that organized criminals are increasingly
getting involved in virus writing and are less likely to be caught
because they tend to be more careful.

"There is a greater criminal element in virus writing than ever before.
If you are an organized gang making money out of viruses and hacking,
you don't go around bragging or having a playground scuffle that results
in one of your number grassing you up to Microsoft," said Cluley.

Munir Kotadia of ZDNet UK reported from London.

You are subscribed as eugen at leitl.org
To manage your subscription, go to

Archives at: http://www.interesting-people.org/archives/interesting-people/

----- End forwarded message -----
Eugen* Leitl <a href="http://leitl.org">leitl</a>
ICBM: 48.07078, 11.61144            http://www.leitl.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE
http://moleculardevices.org         http://nanomachines.net

[demime 1.01d removed an attachment of type application/pgp-signature]

More information about the cypherpunks-legacy mailing list