MSBlast suspect pleads guilty

A 19-year-old Minneapolis man pleaded guilty Wednesday to unleashing part of the MSBlast worm attack that wreaked havoc on the Internet last summer.

Jeffrey Lee Parson admitted creating the "MSBlast.B" variant, also called "teekids," by modifying the original version of the worm and adding a backdoor that granted him control of infected computers, federal prosecutors said.

"Sending out a computer worm may be viewed as a harmless prank," John McKay, a U.S. attorney, said in a statement. "But the damage to individual computer users is very real, and the penalties are also very real."

Sentencing is scheduled for Nov. 12 in Seattle before U.S. District Judge Marsha Pechman. Parson could face between 18 and 37 months in prison on the charge of intentionally causing damage to a networked computer, plus possible restitution in the millions of dollars.

Parson was arrested in August 2003, just two weeks after the MSBlast worms began tunneling into hundreds of thousands of computers running Microsoft Windows. Microsoft had fixed the bug in July, but many Windows users were exposed to the malicious worm because they had not downloaded the patch.

How many computers were infected by the MSBlast.B variant is in dispute. Prosecutors claim the number is more than 48,000, but defense attorneys say the figure is lower. The number could affect the length of any prison sentence.

According to court documents filed last year, FBI agents traced traffic that the Blaster worm generated back to a Web site with a name that resembled Parson's online alias of "teekids." The site allegedly had source code for other worms, including one designed to spread via file-sharing networks.

[Big Downhill]

The price we pay and he pays

It would seem to me that a 18 to 37 month sentencing is not that severe for the amount money that we spend to fixing virus infections.
I believe that individuals conficted of creating and initiating the distribution of them should receive sentences of 10 to 20 years for the pain they cause the rest of us.

19-year-old charged in MSBlast virus

Why should the number of infected computers make any difference in sentencing? If I put a bomb in a room of 100 people and it only kills 1, is the crime any less serious? You know darn well he was hoping to hit a few million computers in order to gain bragging rights.

[Jim Harmon]

Why should the number of computers matter?

Because he should get one day in jail for every affected computer.