The Attachment Borrowed Your Address Book

1. The tempting file

In March 1999, a document posted online promised access to adult websites. Opening it in Microsoft Word unleashed a virus. A familiar document format helped the attachment appear ordinary. The danger depended partly on a recipient opening something that looked usable.

The free offer had included an unwanted extra.

2. The familiar sender is part of the disguise

An attachment arriving through an ordinary message can borrow trust from the person whose name appears beside it. The recipient may recognize the contact without understanding how the file was sent. Melissa exploited that difference, using normal communication habits to create opportunities for the next computer to become involved.

The address book could introduce the wrong guest.

3. A familiar sender

Melissa used infected users’ email systems to send itself onward. Recipients could encounter a harmful attachment appearing to arrive through a familiar contact. Address books supplied a ready-made path to further recipients. Messages arriving from known contacts could seem more trustworthy.

The address book had become a distribution list.

4. The disruption

The rapid spread overwhelmed email systems and required expensive clean-up work. The damage came from replication and disruption across many organisations. Rapid distribution could overwhelm services beyond the first infected computer. The problem involved ordinary communication infrastructure as well as malicious code.

One document had created a very large administrative task.

5. The investigation

A tip from AOL and cooperation among investigators helped trace the outbreak to David Lee Smith. He was arrested in April 1999. The investigation connected a technical incident with a person. Identifying an author still required evidence beyond observing the program's behavior.

The electronic trail was faster than the assumed anonymity.

6. The disruption leaves the first computer

The incident affected services people depended on for routine communication, not only the contents of one infected file. Rapid distribution could overwhelm systems and interrupt work elsewhere. That wider consequence is why a small-looking attachment became a substantial investigation, connecting a piece of code with the real activity it had disrupted.

The document had grown larger than its file size.

7. The outcome

Smith pleaded guilty and received a federal prison sentence in 2002. The outbreak helped raise awareness of the risks carried by unsolicited attachments. The court outcome concerned a real release with real consequences. The event remains a historical example rather than instructions for reproducing it.

An apparently personal message could still contain someone else’s trap.

Sources

• FBI — Melissa virus retrospective