Skip Links

Network World

  • Social Web 
  • Email 
  • Close

German teenager admits in court to creating Sasser worm

By John Blau , IDG News Service , 07/05/2005

German teenager Sven Jaschan confessed at his trial Tuesday to creating last year's Sasser computer worm that crashed hundreds of thousands of computers worldwide after spreading at lightning speed over the Internet.

Jaschan's admission is a reiteration of the confession he made last year when he was arrested . He is on trial in the city of Verden, Germany, where he faces charges of computer sabotage, data manipulation and disruption of public systems.

The 19-year-old teenager admitted to the alleged offenses "in every detail," Verden District Court spokeswoman Katharina Krützfeldt said in a telephone interview.

The charges carry a maximum sentence of five years in prison but Krützfeldt said that Jaschan, who was 17 and a minor at the time of his arrest, will face a lesser penalty. The penalty could be a warning or some form of public service work, but also confinement in a juvenile detention center.

Jaschan could also face civil lawsuits brought against him by companies whose IT systems were infected by the computer worm, according to Krützfeldt. "This is a possibility that could happen after his trial in Verden," she said.

The indictment lists 142 companies, according to Krützfeldt. It includes several big companies that reported attacks, including the German postal company Deutsche Post and Delta Airlines.

Although security experts estimate the damages caused by the worm to be in the millions of dollars, Krützfeldt said the indictment lists an amount of around €130,000 ($155,000).

At the time of his arrest in May 2004, Jaschan had confessed to creating the computer worm and several variants of the Netsky virus. He was arrested at the family's home in Waffensen, Germany, after Microsoft received a tip from an informant seeking a reward from the software company.

Sasser, a self-executing piece of software code, exploited a hole in a component of Windows called the Local Security Authority Subsystem Service, or LSASS. The worm scanned the Internet searching for vulnerable computers.

On April 13, Microsoft had released a software patch, MS04-011, which plugs the LSASS hole, but many companies and individuals had not installed it in time to prevent the Sasser worm from affecting their systems.

Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed

Whitepapers

Magic Quadrant for Application Delivery Controllers

Gartner summarizes its view on Application Delivery Controllers, evaluates strengths and weaknesses...

Vulnerability Management For Dummies

Download this concise book "Vulnerability Management for Dummies," to learn about the simple steps...

The ROI and TCO Benefits of Data Deduplication for Data Protection in the Enterprise

This paper examines and quantifies the costs and benefits of backup with deduplication storage as...

Webcasts

Transforming the Enterprise WAN Edge: Video from Cisco

Life on the edge of your WAN has changed dramatically. With the need to deliver advanced services,...

PoE Plus: Impact on the PoE Market

The standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...

Harnessing the power of communications to increase workplace performance

Due to the convergence of IT and telecommunications technologies, the business workplace has been...

Special Reports

The Evolution of Network Security

We have so many holes punched in our firewalls today that many industry insiders question the value...

The self-managed network

We aren't there yet, but advances in network and systems management tools are making it possible to...

Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.