Netskope Threat Labs

LoveLetter

ATP Sandbox Adv. HeuristicsAV

LoveLetter (a.k.a. ILOVEYOU) is a Visual Basic script worm that spread around the world by email in May 2000 and caused billions of dollars in damage. It arrived as a love themed attachment that overwrote documents and media files with copies of itself and downloaded a password stealing component, and its success came from tricking users into opening files with hidden double extensions.

First seen
April 2022
Last seen
September 2026
Loveletter
Alert Name
ByteCode-MSIL.Worm.LoveLetter
Email-MIME.Worm.LoveLetter
Image.Worm.LoveLetter
Script-WScript.Worm.LoveLetter
Unix.Worm.LoveLetter
VB:Trojan.Emeka.LoveLetter.849
VBS.LoveLetter.D
VBS.LoveLetter.Z
Win32.Worm.VBS.LoveLetter.E
Win64.Backdoor.Loveletter