Actually, this is surprisingly faithful to IRL history. The Morris worm was literally created by a grad student that was either trying to map out how large the fledgling internet was or to prove the point that there were security vulnerabilities in the software everybody was using (answer changes depending on which source you look at but it's probably the latter).
The worm was originally fairly benign (it was designed to propagate to as many computers as possible and then send a single ping to a server) but the problem was that the worm could re-infect computers that were originally infected. This meant what was originally a simple process became a massive DDOS attack that crippled a large portion of the internet at the time as the copies of the worm program ate up all resources on infected computers.