ILOVEYOU

The outbreak demonstrated how social engineering could turn trusted personal contacts into a worldwide delivery system. Its disruption of companies and public agencies made attachment controls, email filtering and user awareness urgent parts of internet security.

- The ILOVEYOU worm began spreading internationally on 4 May 2000. - It is widely attributed to Onel de Guzman, a student in the Philippines. - It arrived in emails with the subject **ILOVEYOU** and the attachment **LOVE-LETTER-FOR-YOU.TXT.vbs**. - The VBScript worm altered files and sent copies through Microsoft Outlook address books. - Its success relied on social engineering and recipients choosing to open the attachment.

- The worm spread rapidly through trusted personal and workplace contacts. - It disrupted businesses, public institutions and government networks worldwide. - At least fourteen United States federal agencies were affected. - Administrators disconnected systems, blocked the attachment and distributed removal guidance. - The outbreak accelerated email filtering, attachment controls and security-awareness training.

- Investigators traced the outbreak to the Philippines. - Philippine authorities investigated Onel de Guzman. - Prosecution was hindered by the absence of legislation covering the relevant computer-related conduct. - The case exposed how existing laws had failed to keep pace with internet crime. - Republic Act No. 8792 was enacted in June 2000 and introduced provisions covering electronic transactions and certain computer offences.

- Antivirus companies released updated detection signatures and removal tools. - Organisations introduced stronger filtering and restrictions on executable attachments. - Improved detection and public awareness reduced the worm’s ability to spread. - ILOVEYOU remains a defining example of malware driven by social engineering.

Widely attributed to Onel de Guzman - creator or operator

VBScript worm spread through a deceptive email attachment and Microsoft Outlook contacts

Preserved - Contained historical cybersecurity incident; preserved in government and security records

- **FBI Archives — Cyber Security Testimony**

- Image 1 source not verified — editorial review required. - Image 2 source not verified — editorial review required. - Image 3 source not verified — editorial review required. - Image 4 source not verified — editorial review required. - Image 5 source not verified — editorial review required. Images are included for historical and archival reference. Rights holders may contact Forgotten Archive through the publishing account to request a credit correction or removal.