One attachment · global disruption · a legal gap exposed
A disguised email attachment used Outlook address books to spread worldwide within hours, exposing both the power of social engineering and a gap in Philippine cybercrime law.
ILOVEYOU was a mass-mailing VBScript worm that began spreading on May 4, 2000 through Microsoft Outlook with the subject "ILOVEYOU" and the attachment "LOVE-LETTER-FOR-YOU.TXT.vbs." It copied itself through address books, overwrote files, and attempted to steal internet-access credentials, causing worldwide disruption across governments, businesses, and personal computers. Philippine investigators centered public suspicion on Onel de Guzman and associates, but the case exposed a legal gap that prevented a straightforward criminal adjudication at the time; it later became a landmark in the history of social engineering, malware response, and cybercrime law reform.
The lure
A familiar subject line hid executable code
Recent developments
Recent reporting and official developments, labeled by source and verification status.
May 6, 2026 · Radar Philippines
Radar Philippines profiled Onel de Guzman and traced how the ILOVEYOU worm grew from credential-stealing code into a global outbreak, while examining the legal gap that prevented a prosecution and his later work repairing phones in Manila.
Read article →The scale
Key figures are drawn from the published case record.
A fast-moving outbreak
Within hours, Outlook automation amplified a disguised attachment worldwide. Investigators moved quickly, but the applicable Philippine law did not.
See all 3 mapped locations →May 4, 2000
The VBScript worm spreads worldwide through Microsoft Outlook using the subject "ILOVEYOU" and the attachment "LOVE-LETTER-FOR-YOU.TXT.vbs," quickly disrupting governments, companies, and home users.
May 4, 2000
Security mailing lists publish dissection of the email’s subject, body text, and dangerous attachment behavior, warning Outlook users not to open it.
May 5, 2000
Investigators identify Onel de Guzman and Reonel Ramones as targets of a criminal probe connected to the ILOVEYOU worm.
May 1, 2000
Reporting and investigative focus increasingly center on former AMA Computer College student Onel de Guzman as the suspected author or originator of the worm.
May 1, 2000
Investigators and prosecutors confront the absence of a clear Philippine cybercrime statute directly covering the conduct exposed by the ILOVEYOU outbreak.
Jun 1, 2000
The case becomes part of the pressure for new Philippine legal frameworks addressing electronic transactions and cyber-enabled misconduct.
Why it worked
The subject line and disguised attachment made social engineering central to the worm's success.
Outlook address-book automation is what turned ILOVEYOU from a malicious attachment into a global outbreak within hours.
Philippine investigators and later reporting consistently centered public suspicion on Onel de Guzman.
A lack of clearly applicable computer-crime law in the Philippines prevented a clean criminal adjudication of the case at the time of the outbreak.
Investigators and later reporting centered on Onel de Guzman, but suspicion, authorship, motive, and legal responsibility remain distinct questions.
Compare the attribution theories →Where certainty changes
Open each layer to see what the archive treats as core, contested, or unresolved.
Go deeper
This overview is the map. The case tabs hold the underlying events, people, media, locations, and source material.