The first stage of the malicious software began Monday , when the Lovsan worm began spreading around the world .