Loading malware…
Anna Kournikova is a mass-mailing Visual Basic Script worm active in 2001 that spread globally through social engineering. It enticed users to open an attachment presented as a picture of Russian tennis player Anna Kournikova, and then replicated by resending itself through Microsoft Outlook contacts. The worm used Visual Basic scripting and double-extension filename techniques as part of its infection method. Multiple sources in the content state it was created using K]Alamar's Vbs Worms Creator toolkit, making it a prominent example of malware generated from widely available virus-construction kits and associated with so-called script-kiddie activity. The worm is described as having spread very rapidly, with its primary impact being mass mailing and potential mail-server congestion rather than destructive damage to infected systems. It is referenced alongside other early-2000s email worms such as Love Bug/ILOVEYOU, and the content notes that defenders recommended mitigations including blocking Visual Basic scripting and files with double extensions. High-confidence behavioral indicators from the content are the celebrity-photo lure, Outlook-contact self-mailing, and use of VBS with double extensions.
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
1 distinct technique documented for this family, organized by ATT&CK tactic.
14 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Malware 2001 Anna Kournikova
2001 Anna Kournikova
A self-replicating email-borne virus that spread by resending itself through Outlook contacts.
Malware 2001 Anna Kournikova
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.