SPAN-027, The Father Christmas Worm Report
Definitive coverage of a December, 1988 DECNet worm, the "Father Christmas" or HI.COM worm. The worm itself has some interest: the author wrote it in DCL, the VAX/VMS scripting language, and the worm counts as one of the very few non-TCP/IP worms (Shoch and Hupp's Alto worms, and the other VMS worm "WANK/OILZ").