Sasser is currently hitting hundreds of thousands of Windows 2000 and XP PCs worldwide.
What I find amazing is that, with the exception of the recent Witty worm (which was rather nasty in several worrying respects), no “successful” worm has yet had a destructive payload. Of all the different groups who have written worms, or had access to the source to produce their own variants, none has decided that they are angry enough to do some serious damage. And I can’t figure out why.
Is there some sort of hidden honour-among-thieves agreement between the major virus writers not to destroy? Is it because they are too busy making money setting up botnets and selling them to spammers?
Whatever the reason is, the world is living on borrowed time. A worm as successful as Code Red, with a “spread for 12 hours then corrupt the hard disk” payload would cause uncountable economic damage.