Monday | 22 March, 2010
CSO
German teenager admits in court to creating Sasser worm
A German teenager confessed to creating last year's Sasser worm on his first day in court Tuesday.
John Blau (IDG News Service) 06/07/2005 08:23:29

German teenager Sven Jaschan confessed at his trial on Tuesday to creating last year's Sasser computer worm that crashed hundreds of thousands of computers worldwide after spreading at lightning speed over the Internet.

Jaschan's admission is a reiteration of the confession he made last year when he was arrested. He is on trial in the city of Verden, Germany, where he faces charges of computer sabotage, data manipulation and disruption of public systems.

The 19-year-old teenager admitted to the alleged offenses "in every detail," Verden District Court spokeswoman Katharina Krutzfeldt said in a telephone interview.

The charges carry a maximum sentence of five years in prison but Krutzfeldt said that Jaschan, who was 17 and a minor at the time of his arrest, will face a lesser penalty. The penalty could be a warning or some form of public service work, but also confinement in a juvenile detention center.

Jaschan could also face civil lawsuits brought against him by companies whose IT systems were infected by the computer worm, according to Krutzfeldt. "This is a possibility that could happen after his trial in Verden," she said.

The indictment lists 142 companies, according to Krutzfeldt. It includes several big companies that reported attacks, including the German postal company Deutsche Post and Delta Airlines.

Although security experts estimate the damages caused by the worm to be in the millions of dollars, Krutzfeldt said the indictment lists an amount of around Euro 130,000 (AUD210,000).

At the time of his arrest in May 2004, Jaschan had confessed to creating the computer worm and several variants of the Netsky virus. He was arrested at the family's home in Waffensen, Germany, after Microsoft received a tip from an informant seeking a reward from the software company.

Sasser, a self-executing piece of software code, exploited a hole in a component of Windows called the Local Security Authority Subsystem Service, or LSASS. The worm scanned the Internet searching for vulnerable computers.

On April 13, Microsoft had released a software patch, MS04-011, which plugs the LSASS hole, but many companies and individuals had not installed it in time to prevent the Sasser worm from affecting their systems.

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.

More information about formatting options

Enter the fully qualified URL, eg. http://www.example.com/
Users posting comments agree to the CSO Online comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Additional Resources
Newsletter Subscription
Sign up for our CSO Online newsletters!
RSS Feeds
Syndicate content
 
Whitepaper

Making the move to Ethernet | A DECISION GUIDE

While enterprises today need higher bandwidth, there is increasing demand for solutions that can provide scalability, performance, simplicity and control at lower costs. Get the best of both worlds - read about Ethernet adoption today.

Sponsored Links