How one attachment became many
MyDoom exploited a basic weakness in email: people are more likely to open a file when it appears to have arrived as an ordinary message. Once a computer ran the attached worm, MyDoom searched for email addresses on that machine and sent copies of itself to them. Each newly infected computer could repeat the cycle, turning recipients into the next wave of senders.
That self-replication made the outbreak grow faster than a single attacker could have sent messages by hand. It also filled inboxes with malicious mail, making legitimate email harder to use and forcing networks and security teams to handle a flood of unwanted traffic.
Infected computers became infrastructure
MyDoom did more than spread. It could use compromised computers as spam relays—machines that send bulk email on someone else’s behalf. That shifted the cost of the operation onto unsuspecting owners and their internet providers, while making the spam harder to trace back to its controller.
The worm also left a way for an outside party to communicate with infected machines. That kind of hidden access, called a backdoor, can turn an ordinary home or office computer into a remotely controlled resource. A machine’s owner might notice only that it was behaving strangely or that its connection had become sluggish.
Why the damage spread beyond victims
A fast-moving worm creates a shared problem: every infected device sends more traffic into networks already trying to contain the outbreak. Providers and organizations must filter messages, investigate compromised systems, and clean or rebuild machines. Even people who never opened the attachment can feel the effects when email and internet services slow under the added load.
The lasting lesson was that a computer’s security is not purely personal. An unpatched or careless machine can be recruited into activity that burdens strangers’ networks—making a single click part of a much larger chain.
