Timeline of computer viruses and worms - wikipedia Timeline of computer viruses and worms Not to be confused with List of computer worms. This article may require cleanup to meet Wikipedia 's quality standards. The specific problem is : includes many viruses of unclear noteworthiness Please help improve this article if you can. ( November 2015 ) This timeline of computer viruses and worms presents a chronological timeline of noteworthy computer viruses, computer worms, Trojan horses, similar malware, related research and events. Contents 1 1949 2 1971 -- 1979 2.1 1971 2.2 1973 ( Fiction ) 2.3 1974 2.4 1975 3 1981 -- 1989 3.1 1981 3.2 1983 3.3 1984 3.4 1986 3.5 1987 3.6 1988 3.7 1989 4 1990 -- 1999 4.1 1990 4.2 1992 4.3 1993 4.4 1994 4.5 1995 4.6 1996 4.7 1998 4.8 1999 5 2000 -- 2009 5.1 2000 5.2 2001 5.3 2002 5.4 2003 5.5 2004 5.6 2005 5.7 2006 5.8 2007 5.9 2008 5.10 2009 6 2010 -- present 6.1 2010 6.2 2011 6.3 2012 6.4 2013 6.5 2014 6.6 2015 6.7 2016 6.8 2017 7 See also 8 References 9 External links 1949 John von Neumann 's article on the `` Theory of self - reproducing automata '' is published. The article is based on lectures given by von Neumann at the University of Illinois about the `` Theory and Organization of Complicated Automata '' in 1949. 1971 -- 1979 1971 The Creeper system, an experimental self - replicating program, is written by Bob Thomas at BBN Technologies to test John von Neumann 's theory. Creeper infected DEC PDP - 10 computers running the TENEX operating system. Creeper gained access via the ARPANET and copied itself to the remote system where the message `` I 'm the creeper, catch me if you can ! '' was displayed. The Reaper program was later created to delete Creeper. 1973 ( fiction ) In fiction, the 1973 Michael Crichton movie Westworld made an early mention of the concept of a computer virus, being a central plot theme that causes androids to run amok. Alan Oppenheimer 's character summarizes the problem by stating that ``... there 's a clear pattern here which suggests an analogy to an infectious disease process, spreading from one... area to the next. '' To which the replies are stated : `` Perhaps there are superficial similarities to disease '' and, `` I must confess I find it difficult to believe in a disease of machinery. '' ( Crichton 's earlier work, the 1969 novel The Andromeda Strain and 1971 film were about an extraterrestrial biological virus - like disease that threatened the human race. ) The Rabbit ( or Wabbit ) virus, more a fork bomb than a virus, is written. The Rabbit virus makes multiple copies of itself on a single computer ( and was named `` Rabbit '' for the speed at which it did so ) until it clogs the system, reducing system performance, before finally reaching a threshold and crashing the computer. April : ANIMAL is written by John Walker for the UNIVAC 1108. ANIMAL asked a number of questions of the user in an attempt to guess the type of animal that the user was thinking of, while the related program PERVADE would create a copy of itself and ANIMAL in every directory to which the current user had access. It spread across the multi-user UNIVACs when users with overlapping permissions discovered the game, and to other computers when tapes were shared. The program was carefully written to avoid damage to existing file or directory structures, and not to copy itself if permissions did not exist or if damage could result. Its spread was therefore halted by an OS upgrade which changed the format of the file status tables that PERVADE used for safe copying. Though non-malicious, `` Pervading Animal '' represents the first Trojan `` in the wild ''. The novel The Shockwave Rider by John Brunner is published, coining the word `` worm '' to describe a program that propagates itself through a computer network. 1981 -- 1989 1981 A program called Elk Cloner, written for Apple II systems, was created by Richard Skrenta. The Apple II was seen as particularly vulnerable due to the storage of its operating system on floppy disk. Elk Cloner 's design combined with public ignorance about what malware was and how to protect against it led to Elk Cloner being responsible for the first large - scale computer virus outbreak in history. November : The term ' virus ' is coined by Frederick Cohen in describing self - replicating computer programs. In 1984 Cohen uses the phrase `` computer virus '' -- as suggested by his teacher Leonard Adleman -- to describe the operation of such programs in terms of `` infection ''. He defines a ' virus ' as `` a program that can ' infect ' other programs by modifying them to include a possibly evolved copy of itself. '' Cohen demonstrates a virus - like program on a VAX11 / 750 system at Lehigh University. The program could install itself in, or infect, other system objects. 1984 August : Ken Thompson publishes his seminal paper, Reflections on Trusting Trust, in which he describes how he modified a C compiler so that when used to compile a specific version of the Unix operating system, it inserted a backdoor into the login command, and when used to compile itself, it inserted the backdoor insertion code, even if neither the backdoor nor the backdoor insertion code were present in the source code. 1986 January : The Brain boot sector virus is released. Brain is considered the first IBM PC compatible virus, and the program responsible for the first IBM PC compatible virus epidemic. The virus is also known as Lahore, Pakistani, Pakistani Brain, and Pakistani flu as it was created in Lahore, Pakistan by 19 - year - old Pakistani programmer, Basit Farooq Alvi, and his brother, Amjad Farooq Alvi. December : Ralf Burger presented the Virdem model of programs at a meeting of the underground Chaos Computer Club in Germany. The Virdem model represented the first programs that could replicate themselves via addition of their code to executable DOS files in COM format. Appearance of the Vienna virus, which was subsequently neutralized -- the first time this had happened on the IBM platform. Appearance of Lehigh virus ( discovered at its namesake university ), boot sector viruses such as Yale from USA, Stoned from New Zealand, Ping Pong from Italy, and appearance of first self - encrypting file virus, Cascade. Lehigh was stopped on campus before it spread to the wild, and has never been found elsewhere as a result. A subsequent infection of Cascade in the offices of IBM Belgium led to IBM responding with its own antivirus product development. Prior to this, antivirus solutions developed at IBM were intended for staff use only. October : The Jerusalem virus, part of the ( at that time unknown ) Suriv family, is detected in the city of Jerusalem. The virus destroys all executable files on infected machines upon every occurrence of Friday the 13th ( except Friday 13 November 1987 making its first trigger date May 13, 1988 ). Jerusalem caused a worldwide epidemic in 1988. November : The SCA virus, a boot sector virus for Amiga computers appear, immediately creating a pandemic virus - writer storm. A short time later, SCA releases another, considerably more destructive virus, the Byte Bandit. December : Christmas Tree EXEC was the first widely disruptive replicating network program, which paralyzed several international computer networks in December 1987. It was written in Rexx on the VM / CMS operating system and originated in what was then West Germany. It re-emerged in 1990. 1988 March 1 : The Ping - Pong virus ( also called Boot, Bouncing Ball, Bouncing Dot, Italian, Italian - A or VeraCruz ), an MS - DOS boot sector virus, is discovered at the University of Turin in Italy. June : The CyberAIDS and Festering Hate Apple ProDOS viruses spreads from underground pirate BBS systems and starts infecting mainstream networks. Festering Hate was the last iteration of the CyberAIDS series extending back to 1985 and 1986. Unlike the few Apple viruses that had come before which were essentially annoying, but did no damage, the Festering Hate series of viruses was extremely destructive, spreading to all system files it could find on the host computer ( hard drive, floppy, and system memory ) and then destroying everything when it could no longer find any uninfected files. November 2 : The Morris worm, created by Robert Tappan Morris, infects DEC VAX and Sun machines running BSD UNIX that are connected to the Internet, and becomes the first worm to spread extensively `` in the wild '', and one of the first well - known programs exploiting buffer overrun vulnerabilities. 1989 October : Ghostball, the first multipartite virus, is discovered by Friðrik Skúlason. It infects both executable. COM - files and boot sectors on MS - DOS systems. December : Several thousand floppy disks containing the AIDS Trojan, the first known ransomware, are mailed to subscribers of PC Business World magazine and a WHO AIDS conference mailing list. This DOS Trojan lies dormant for 90 boot cycles, then encrypts all filenames on the system, displaying a notice asking for $189 to be sent to a post office box in Panama in order to receive a decryption program. 1990 -- 1999 1990 Mark Washburn, working on an analysis of the Vienna and Cascade viruses with Ralf Burger, develops the first family of polymorphic viruses, the Chameleon family. Chameleon series debuted with the release of 1260. June : The Form computer virus is isolated in Switzerland. It would remain in the wild for almost 20 years and reappear afterwards ; during the 1990s it tended to be the most common virus in the wild with 20 to more than 50 per cent of reported infections. 1992 March : The Michelangelo virus was expected to create a digital apocalypse on March 6, with millions of computers having their information wiped, according to mass media hysteria surrounding the virus. Later assessments of the damage showed the aftermath to be minimal. John McAfee had been quoted by the media as saying that 5 million computers would be affected. He later said that, pressed by the interviewer to come up with a number, he had estimated a range from 5 thousand to 5 million, but the media naturally went with just the higher number. 1993 `` Leandro '' or `` Leandro & Kelly '' and `` Freddy Krueger '' spread quickly due to popularity of BBS and shareware distribution. 1994 April : OneHalf is a DOS - based polymorphic computer virus. 1995 The first Macro virus, called `` Concept '', is created. It attacked Microsoft Word documents. `` Ply '' -- DOS 16 - bit based complicated polymorphic virus appeared with built - in permutation engine. Boza, the first virus designed specifically for Windows 95 files arrives. Laroux, the first Excel macro virus appears. Staog, the first Linux virus attacks Linux machines 1998 June 2 : The first version of the CIH virus appears. It is the first known virus able to erase flash ROM BIOS content. 1999 January 20 : The Happy99 worm first appeared. It invisibly attaches itself to emails, displays fireworks to hide the changes being made, and wishes the user a happy New Year. It modifies system files related to Outlook Express and Internet Explorer ( IE ) on Windows 95 and Windows 98. March 26 : The Melissa worm was released, targeting Microsoft Word and Outlook - based systems, and creating considerable network traffic. June 6 : The ExploreZip worm, which destroys Microsoft Office documents, was first detected. December 30 : The Kak worm is a JavaScript computer worm that spread itself by exploiting a bug in Outlook Express. 2000 -- 2009 2000 May 5 : The ILOVEYOU worm, also known as Love Letter, or VBS, or Love Bug worm, is a computer worm purportedly created by a Filipino computer science student. Written in VBScript, it infected millions of Windows computers worldwide within a few hours of its release. Using social engineering techniques, it is considered to be one of the most damaging worms ever. June 28 : The Pikachu virus is believed to be the first computer virus geared at children. It contains the character `` Pikachu '' from the Pokémon series, and is in the form of an e-mail titled `` Pikachu Pokemon '' with the message : `` Pikachu is your friend. '' The attachment to the email has `` an image of a pensive Pikachu '', along with a message stating, `` Between millions of people around the world I found you. Do n't forget to remember this day every time MY FRIEND. '' Along with the image, there is a program, written in Visual Basic 6, called `` pikachupokemon. exe '' that modifies the AUTOEXEC. BAT file and adds a command for removing the contents of directories C : Windows and C : Windows System at computer 's restart. However, a message would appear during startup, asking the user if they would like to delete the contents of those folders. This is because the author, instead of writing the lines `` del C : WINDOWS *. * / y '' and `` del C : WINDOWS SYSTEM *. * / y '' to AUTOEXEC. BAT, the author did not include the / y switches, which would have automatically chosen the yes option. The operating systems affected by this worm are Windows 95, Windows 98, and Windows ME. 2001 February 11 : The Anna Kournikova virus hits e-mail servers hard by sending e-mail to contacts in the Microsoft Outlook addressbook. Its creator, Jan de Wit, was sentenced to 150 hours of community service. May 8 : The Sadmind worm spreads by exploiting holes in both Sun Solaris and Microsoft IIS. July : The Sircam worm is released, spreading through Microsoft systems via e-mail and unprotected network shares. July 13 : The Code Red worm attacking the Index Server ISAPI Extension in Microsoft Internet Information Services is released. August 4 : A complete re-write of the Code Red worm, Code Red II begins aggressively spreading onto Microsoft systems, primarily in China. September 18 : The Nimda worm is discovered and spreads through a variety of means including vulnerabilities in Microsoft Windows and backdoors left by Code Red II and Sadmind worm. October 26 : The Klez worm is first identified. It exploits a vulnerability in Microsoft Internet Explorer and Microsoft Outlook and Outlook Express. 2002 February 11 : The Simile virus is a metamorphic computer virus written in assembly. Beast is a Windows - based backdoor Trojan horse, more commonly known as a RAT ( Remote Administration Tool ). It is capable of infecting almost all versions of Windows. Written in Delphi and released first by its author Tataye in 2002, its most current version was released October 3, 2004 March 7 : Mylife is a computer worm that spread itself by sending malicious emails to all the contacts in Microsoft Outlook. 2003 January 24 : The SQL Slammer worm, aka Sapphire worm, Helkern and other names, attacks vulnerabilities in Microsoft SQL Server and MSDE becomes the fastest spreading worm of all time ( measured by doubling time at the peak rate of growth ), causing massive Internet access disruptions worldwide just fifteen minutes after infecting its first victim. April 2 : Graybird is a trojan horse also known as Backdoor. Graybird. June 13 : ProRat is a Turkish - made Microsoft Windows based backdoor trojan horse, more commonly known as a RAT ( Remote Administration Tool ). August 12 : The Blaster worm, aka the Lovesan worm, rapidly spreads by exploiting a vulnerability in system services present on Windows computers. August 18 : The Welchia ( Nachi ) worm is discovered. The worm tries to remove the blaster worm and patch Windows. August 19 : The Sobig worm ( technically the Sobig. F worm ) spreads rapidly through Microsoft systems via mail and network shares. September 18 : Swen is a computer worm written in C++. October 24 : The Sober worm is first seen on Microsoft systems and maintains its presence until 2005 with many new variants. The simultaneous attacks on network weakpoints by the Blaster and Sobig worms cause massive damage. November 10 : Agobot is a computer worm that can spread itself by exploiting vulnerabilities on Microsoft Windows. Some of the vulnerabilities are MS03 - 026 and MS05 - 039. November 20 : Bolgimo is a computer worm that spread itself by exploiting a buffer overflow vulnerability at Microsoft Windows DCOM RPC Interface. January 18 : Bagle is a mass - mailing worm affecting all versions of Microsoft Windows. There were 2 variants of Bagle worm, Bagle. A and Bagle. B. Bagle. B was discovered on February 17, 2004. Late January : The MyDoom worm emerges, and currently holds the record for the fastest - spreading mass mailer worm. The worm was most notable for performing a distributed denial - of - service ( DDoS ) attack on www.sco.com, which belonged to The SCO Group. February 16 : The Netsky worm is discovered. The worm spreads by email and by copying itself to folders on the local hard drive as well as on mapped network drives if available. Many variants of the Netsky worm appeared. March 19 : The Witty worm is a record - breaking worm in many regards. It exploited holes in several Internet Security Systems ( ISS ) products. It was the fastest disclosure to worm, it was the first internet worm to carry a destructive payload and it spread rapidly using a pre-populated list of ground - zero hosts. May 1 : The Sasser worm emerges by exploiting a vulnerability in the Microsoft Windows LSASS service and causes problems in networks, while removing MyDoom and Bagle variants, even interrupting business. June 15 : Caribe or Cabir is a computer worm that is designed to infect mobile phones that run Symbian OS. It is the first computer worm that can infect mobile phones. It spread itself through Bluetooth. More information can be found on F - Secure and Symantec. August 16 : Nuclear RAT ( short for Nuclear Remote Administration Tool ) is a backdoor trojan that infects Windows NT family systems ( Windows 2000, Windows XP, Windows 2003 ). August 20 : Vundo, or the Vundo Trojan ( also known as Virtumonde or Virtumondo and sometimes referred to as MS Juan ) is a trojan known to cause popups and advertising for rogue antispyware programs, and sporadically other misbehaviour including performance degradation and denial of service with some websites including Google and Facebook. October 12 : Bifrost, also known as Bifrose, is a backdoor trojan which can infect Windows 95 through Vista. Bifrost uses the typical server, server builder, and client backdoor program configuration to allow a remote attack. December : Santy, the first known `` webworm '' is launched. It exploited a vulnerability in phpBB and used Google in order to find new targets. It infected around 40000 sites before Google filtered the search query used by the worm, preventing it from spreading. 2005 August 2005 : Zotob October 2005 : The copy protection rootkit deliberately and surreptitiously included on music CDs sold by Sony BMG is exposed. The rootkit creates vulnerabilities on affected computers, making them susceptible to infection by worms and viruses. Late 2005 : The Zlob Trojan, is a Trojan horse program that masquerades as a required video codec in the form of the Microsoft Windows ActiveX component. It was first detected in late 2005. 2006 January 20 : The Nyxem worm was discovered. It spread by mass - mailing. Its payload, which activates on the third of every month, starting on February 3, attempts to disable security - related and file sharing software, and destroy files of certain types, such as Microsoft Office files. February 16 : discovery of the first - ever malware for Mac OS X, a low - threat trojan - horse known as OSX / Leap - A or OSX / Oompa - A, is announced. Late March : Brontok variant N was found in late March. Brontok was a mass - email worm and the origin for the worm was from Indonesia. June : Starbucks is a virus that infects StarOffice and OpenOffice. Late September : Stration or Warezov worm first discovered. 2007 January 17 : Storm Worm identified as a fast spreading email spamming threat to Microsoft systems. It begins gathering infected computers into the Storm botnet. By around June 30 it had infected 1.7 million computers, and it had compromised between 1 and 10 million computers by September. Thought to have originated from Russia, it disguises itself as a news email containing a film about bogus news stories asking you to download the attachment which it claims is a film. July : Zeus is a trojan that targets Microsoft Windows to steal banking information by keystroke logging. 2008 February 17 : Mocmex is a trojan, which was found in a digital photo frame in February 2008. It was the first serious computer virus on a digital photo frame. The virus was traced back to a group in China. March 3 : Torpig, also known as Sinowal and Mebroot, is a Trojan horse that affects Windows, turning off anti-virus applications. It allows others to access the computer, modifies data, steals confidential information ( such as user passwords and other sensitive data ) and installs more malware on the victim 's computer. May 6 : Rustock. C, a hitherto - rumoured spambot - type malware with advanced rootkit capabilities, was announced to have been detected on Microsoft systems and analyzed, having been in the wild and undetected since October 2007 at the very least. July 6 : Bohmini. A is a configurable remote access tool or trojan that exploits security flaws in Adobe Flash 9.0. 115 with Internet Explorer 7.0 and Firefox 2.0 under Windows XP SP2. July 31 : The Koobface computer worm targets users of Facebook and Myspace. New variants constantly appear. November 21 : Computer worm Conficker infects anywhere from 9 to 15 million Microsoft server systems running everything from Windows 2000 to the Windows 7 Beta. The French Navy, UK Ministry of Defence ( including Royal Navy warships and submarines ), Sheffield Hospital network, German Bundeswehr and Norwegian Police were all affected. Microsoft sets a bounty of US $ 250,000 for information leading to the capture of the worm 's author ( s ). Five main variants of the Conficker worm are known and have been dubbed Conficker A, B, C, D and E. They were discovered 21 November 2008, 29 December 2008, 20 February 2009, 4 March 2009 and 7 April 2009, respectively. On December 16, 2008, Microsoft releases KB958644 patching the server service vulnerability responsible for the spread of Conficker. 2009 July 4 : The July 2009 cyber attacks occur and the emergence of the W32. Dozer attack the United States and South Korea. July 15 : Symantec discovered Daprosy Worm. Said trojan worm is intended to steal online - game passwords in internet cafes. It could, in fact, intercept all keystrokes and send them to its author which makes it potentially a very dangerous worm to infect B2B ( business - to - business ) systems. August 24 : Source code for MegaPanzer is released by its author under GPLv3. and appears to have been apparently detected in the wild. 2010 -- present January : The Waledac botnet sent spam emails. In February 2010, an international group of security researchers and Microsoft took Waledac down. January : The Psyb0t worm is discovered. It is thought to be unique in that it can infect routers and high - speed modems. February 18 : Microsoft announced that a BSoD problem on some Windows machines which was triggered by a batch of Patch Tuesday updates was caused by the Alureon Trojan. June 17 : Stuxnet, a Windows Trojan, was detected. It is the first worm to attack SCADA systems. There are suggestions that it was designed to target Iranian nuclear facilities. It uses a valid certificate from Realtek. September 9 : The virus, called `` here you have '' or `` VBMania '', is a simple Trojan horse that arrives in the inbox with the odd - but - suggestive subject line `` here you have ''. The body reads `` This is The Document I told you about, you can find it Here '' or `` This is The Free Download Sex Movies, you can find it Here ''. September 15 : The virus called Kenzero is a virus that spreads online from Peer to peer ( P2P ) sites taking browsing history. 2011 SpyEye and Zeus merged code is seen. New variants attack mobile phone banking information. Anti-Spyware 2011, a Trojan horse that attacks Windows 9x, 2000, XP, Vista, and Windows 7, posing as an anti-spyware program. It actually disables security - related process of anti-virus programs, while also blocking access to the Internet, which prevents updates. Summer 2011 : The Morto worm attempts to propagate itself to additional computers via the Microsoft Windows Remote Desktop Protocol ( RDP ). Morto spreads by forcing infected systems to scan for Windows servers allowing RDP login. Once Morto finds an RDP - accessible system, it attempts to log into a domain or local system account named ' Administrator ' using a number of common passwords. A detailed overview of how the worm works -- along with the password dictionary Morto uses -- was done by Imperva. July 13 : the ZeroAccess rootkit ( also known as Sirefef or max++ ) was discovered. September 1 : Duqu is a worm thought to be related to the Stuxnet worm. The Laboratory of Cryptography and System Security ( CrySyS Lab ) of the Budapest University of Technology and Economics in Hungary discovered the threat, analysed the malware, and wrote a 60 - page report naming the threat Duqu. Duqu gets its name from the prefix `` ~ DQ '' it gives to the names of files it creates. 2012 May : Flame -- also known as Flamer, sKyWIper, and Skywiper -- a modular computer malware that attacks computers running Microsoft Windows. Used for targeted cyber espionage in Middle Eastern countries. Its discovery was announced on 28 May 2012 by MAHER Center of Iranian National Computer Emergency Response Team ( CERT ), Kaspersky Lab and CrySyS Lab of the Budapest University of Technology and Economics. CrySyS stated in their report that `` sKyWIper is certainly the most sophisticated malware we encountered during our practice ; arguably, it is the most complex malware ever found ''. August 16 : Shamoon is a computer virus designed to target computers running Microsoft Windows in the energy sector. Symantec, Kaspersky Lab, and Seculert announced its discovery on August 16, 2012. September 20 : NGRBot is a worm that uses the IRC network for file transfer, sending and receiving commands between zombie network machines and the attacker 's IRC server, and monitoring and controlling network connectivity and intercept. It employs a user - mode rootkit technique to hide and steal its victim 's information. This family of bot is also designed to infect HTML pages with inline frames ( iframes ), causing redirections, blocking victims from getting updates from security / antimalware products, and killing those services. The bot is designed to connect via a predefined IRC channel and communicate with a remote botnet. 2013 September : The CryptoLocker Trojan horse is discovered. Cryptolocker encrypts the files on a user 's hard drive, then prompts them to pay a ransom to the developer in order to receive the decryption key. In the following months, a number of copycat ransomware Trojans are also discovered. December : The Gameover ZeuS Trojan is discovered. This type of virus steals one 's login details on popular Web sites that involve monetary transactions. It works by detecting a login page, then proceeds to inject a malicious code into the page, keystroke logging the computer user 's details. December : Linux. Darlloz targets the Internet of things and infects routers, security cameras, set - top boxes by exploiting a PHP vulnerability. 2014 November : The Regin Trojan horse is discovered. Regin is a dropper that is primarily spread via spoofed Web pages. Once downloaded, Regin quietly downloads extensions of itself, making it difficult to be detected via anti-virus signatures. It is suspected to have been created by the United States and United Kingdom over a period of months or years, as a tool for espionage and mass surveillance. 2015 The BASHLITE malware is leaked leading to a massive spike in DDoS attacks. Linux. Wifatch is revealed to the general public. It is found to attempt to secure devices from other more malicious malware. 2016 February : Ransomware Locky with its over 60 derivatives spread throughout Europe and infected several million computers. At the height of the spread over five thousand computers per hour were infected in Germany alone. Although ransomware was not a new thing at the time, insufficient cyber security as well as a lack of standards in IT was responsible for the high number of infections. Unfortunately even up to date antivirus and internet security software was unable to protect systems from early versions of Locky. February : Tiny Banker Trojan ( Tinba ) makes headlines. Since its discovery, it has been found to have infected more than two dozen major banking institutions in the United States, including TD Bank, Chase, HSBC, Wells Fargo, PNC and Bank of America. Tiny Banker Trojan uses HTTP injection to force the user 's computer to believe that it is on the bank 's website. This spoof page will look and function just as the real one. The user then enters their information to log on, at which point Tinba can launch the bank webpage 's `` incorrect login information '' re ( 1 ) turn, and redirect the user to the real website. This is to trick the user into thinking they had entered the wrong information and proceed as normal, although now Tinba has captured the credentials and sent them to its host. September : Mirai creates headlines by launching some of the most powerful and disruptive DDoS attacks seen to date by infecting the Internet of Things. Mirai ends up being used in the DDoS attack on 20 September 2016 on the Krebs on Security site which reached 620 Gbit / s. Ars Technica also reported a 1 Tbit / s attack on French web host OVH. On 21 October 2016 multiple major DDoS attacks in DNS services of DNS service provider Dyn occurred using Mirai malware installed on a large number of IoT devices, resulting in the inaccessibility of several high - profile websites such as GitHub, Twitter, Reddit, Netflix, Airbnb and many others. The attribution of the attack to the Mirai botnet was originally reported by BackConnect Inc., a security firm. 2017 May : The WannaCry ransomware attack spreads globally. Exploits revealed in the NSA hacking toolkit leak of late 2016 were used to enable the propagation of the malware. Shortly after the news of the infections broke online, a UK cybersecurity researcher in collaboration with others found and activated a `` kill switch '' hidden within the ransomware, effectively halting the initial wave of its global propagation. The next day, researchers announced that they had found new variants of the malware without the kill switch. June : The Petya ( malware ) attack spreads globally affecting Windows systems. Researchers at Symantec reveal that this ransomware uses the EternalBlue exploit, similar to the one used in the WannaCry ransomware attack. September : The Xafecopy Trojan attack 47 countries affecting only Android operating systems. Kaspersky Lab identified it as a malware from the Ubsod family, stealing money through click based WAP billing systems. September : A new variety of RAT Trojan, Kedi RAT ( Remote Access Trojan ) distributed in a Spear Phishing Campaign. The attack targeted Citrix users. The Trojan was able to evade usual system scanners. Kedi Trojan has all characteristics of a common Remote Access Trojan and it could communicate to its Command and Control center via gmail using common HTML, HTTP protocols. See also Helpful worm Multipartite virus Timeline of computer security hacker history References Jump up ^ von Neumann, John ( 1966 ). Arthur W. Burks, ed. Theory of self - reproducing automata ( PDF ). University of Illinois Press. Retrieved June 12, 2010. Jump up ^ Chen, Thomas ; Robert, Jean - Marc ( 2004 ). `` The Evolution of Viruses and Worms ''. Archived from the original on 2009 - 05 - 17. Retrieved 2009 - 02 - 16. Jump up ^ Russell, Deborah ; Gangemi, GT ( 1991 ). Computer Security Basics. O'Reilly. p. 86. ISBN 0 - 937175 - 71 - 4. Jump up ^ `` IMDB synopsis of Westworld ''. www.imdb.com. Retrieved November 28, 2015. Jump up ^ Michael Crichton ( November 21, 1973 ). Westworld ( movie ). 201 S. Kinney Road, Tucson, Arizona, USA : Metro - Goldwyn - Mayer. Event occurs at 32 minutes. And there 's a clear pattern here which suggests an analogy to an infectious disease process, spreading from one resort area to the next. ''... `` Perhaps there are superficial similarities to disease. '' `` I must confess I find it difficult to believe in a disease of machinery. access - date = requires url = ( help ) Jump up ^ `` The very first viruses : Creeper, Wabbit and Brain '', Daniel Snyder, InfoCarnivore, May 30, 2010 Jump up ^ `` ANIMAL Source Code ''. Fourmilab.ch. 1996 - 08 - 13. Retrieved 2012 - 03 - 29. Jump up ^ `` The Animal Episode ''. Fourmilab.ch. Retrieved 2012 - 03 - 29. Jump up ^ Craig E. Engler ( 1997 ). `` The Shockwave Rider ''. Classic Sci - Fi Reviews. Archived from the original on 2008 - 07 - 03. Retrieved 2008 - 07 - 28. Jump up ^ `` First virus hatched as a practical joke '', Sydney Morning Herald ( AP ), 3 September 2007. Retrieved 9 September 2013. Jump up ^ `` Fred Cohen 1984 `` Computer Viruses -- Theory and Experiments '' ``. Eecs.umich.edu. 1983 - 11 - 03. Retrieved 2012 - 03 - 29. Jump up ^ Communications of the ACM, Vol. 27, No. 8, August 1984, pp. 761 -- 763. Jump up ^ Leyden, John ( January 19, 2006 ). `` PC virus celebrates 20th birthday ''. The Register. Retrieved March 21, 2011. Jump up ^ The Art of Computer Virus Research and Defense, Peter Szor, Symantec Press / Addison - Wesley Professional, 2005, ISBN 978 - 0 - 321 - 30454 - 4 ^ Jump up to : `` Computer Virus ! '', Rob Wentworth, Reprinted from The Digital Viking, Twin Cities PC User Group, July 1996. Retrieved 9 September 2013. Jump up ^ `` Virus. DOS. Chameleon. 1260 -- Securelist ''. Viruslist.com. Retrieved 2010 - 07 - 10. Jump up ^ `` V2PX ''. Vil.nai.com. Archived from the original on 2009 - 07 - 22. Retrieved 2010 - 07 - 10. Jump up ^ `` What we detect -- Securelist ''. Viruslist.com. Archived from the original on 2009 - 07 - 13. Retrieved 2010 - 07 - 10. Jump up ^ `` Leandro '', Threat Encyclopedia, Trend Micro, 9 March 2000. Retrieved 9 September 2013. Jump up ^ `` Freddy Virus '', Virus Information Summary List, December 1992. Retrieved 9 September 2013. Jump up ^ `` Glossary -- Securelist ''. Viruslist.com. Retrieved 2010 - 07 - 10. Jump up ^ `` Wscript. KakWorm ''. Symantec. Retrieved 2012 - 03 - 29. Jump up ^ `` Kournikova computer virus hits hard ''. BBC News. February 13, 2001. Retrieved April 9, 2010. Jump up ^ Evers, Joris ( May 3, 2002 ). `` Kournikova virus maker appeals sentence ''. Retrieved 20 November 2010. Jump up ^ `` MyLife Worm ''. Antivirus.about.com. 2002 - 03 - 07. Retrieved 2012 - 03 - 29. Jump up ^ `` The Spread of the Sapphire / Slammer Worm ''. Retrieved 2012 - 12 - 14. Jump up ^ `` Slammed ! ''. July 2003. Retrieved 2012 - 12 - 14. Jump up ^ Sevcenco, Serghei ( February 10, 2006 ). `` Symantec Security Response : Backdoor. Graybird ''. Symantec. Archived from the original on December 11, 2003. Retrieved 2009 - 03 - 01. Jump up ^ `` Backdoor. Prorat ''. Symantec. February 13, 2007. Retrieved 2009 - 03 - 01. Jump up ^ `` Threat Description : Worm : W32 / Swen ''. F-secure.com. Retrieved 2012 - 03 - 29. Jump up ^ `` Backdoor. Win32. Agobot. gen ''. Securelist. Archived from the original on 2012 - 03 - 15. Retrieved 2012 - 03 - 29. Jump up ^ `` W32. Bolgi. Worm ''. Symantec. Retrieved 2012 - 03 - 29. Jump up ^ `` Threat Description : Bluetooth - Worm : SymbOS / Cabir ''. F-secure.com. Retrieved 2012 - 03 - 29. Jump up ^ `` SymbOS. Cabir ''. Symantec. Retrieved 2012 - 03 - 29. Jump up ^ `` Spyware Detail Nuclear RAT 1.0 b1 ''. Computer Associates. August 16, 2004. Archived from the original on 2009 - 09 - 11. Retrieved 2009 - 03 - 01. Jump up ^ `` Vundo ''. McAfee. Archived from the original on 2009 - 02 - 17. Retrieved 2009 - 03 - 01. Jump up ^ `` Backdoor. Bifrose ''. Symantec, Inc. October 12, 2004. Retrieved 2009 - 02 - 28. Jump up ^ `` The ZLOB Show : Trojan Poses as Fake Video Codec, Loads More Threats ''. Trend Micro. Retrieved 2009 - 02 - 28. Jump up ^ `` Threat Description : Email - Worm : W32 / Brontok. N ''. F-secure.com. Retrieved 2012 - 03 - 29. Jump up ^ Peter Gutmann ( 31 August 2007 ). `` World 's most powerful supercomputer goes online ''. Full Disclosure. Retrieved 2007 - 11 - 04. Jump up ^ Gage, Deborah ( February 17, 2005 ). `` Chinese PC virus may have hidden agenda ''. SeatlePI. Retrieved 2009 - 03 - 01. Jump up ^ Kimmo ( March 3, 2008 ). `` MBR Rootkit, A New Breed of ''. F - Secure. Retrieved 2009 - 03 - 01. Jump up ^ `` Win32. Ntldrbot ( aka Rustock ) ''. Dr. Web Ltd. Retrieved 2009 - 03 - 01. Jump up ^ `` Virus Total ''. virustotal.com. July 8, 2008. Archived from the original on 2009 - 04 - 01. Retrieved 2009 - 03 - 01. Jump up ^ `` Koobface malware makes a comeback ''. cnet.com. April 9, 2010. Retrieved 2009 - 04 - 13. Jump up ^ Willsher, Kim ( 2009 - 02 - 07 ). `` French fighter planes grounded by computer virus ''. London : The Daily Telegraph. Retrieved 2009 - 04 - 01. Jump up ^ Williams, Chris ( 2009 - 01 - 20 ). `` MoD networks still malware - plagued after two weeks ''. The Register. Retrieved 2009 - 01 - 20. Jump up ^ Williams, Chris ( 2009 - 01 - 20 ). `` Conficker seizes city 's hospital network ''. The Register. Retrieved 2009 - 01 - 20. Jump up ^ `` Conficker - Wurm infiziert hunderte Bundeswehr - Rechner '' ( in German ). PC Professionell. 2009 - 02 - 16. Archived from the original on 2009 - 03 - 21. Retrieved 2009 - 04 - 01. Jump up ^ Neild, Barry ( 2009 - 02 - 13 ). `` $250 K Microsoft bounty to catch worm creator ''. CNN. Retrieved 2009 - 03 - 29. Jump up ^ `` MS08 - 067 : Vulnerability in Server service could allow remote code execution ''. Microsoft Corporation. Jump up ^ Dancho Danchev. `` Source code for Skype eavesdropping trojan in the wild ''. ZDNet. Jump up ^ `` Code for Skype Spyware Released to Thwart Surveillance ''. WIRED. 31 August 2009. Jump up ^ `` Waledac Takedown Successful ''. honeyblog.org. February 25, 2010. Retrieved 16 November 2012. Jump up ^ Paul, Ian ( 25 March 2009 ). `` Nasty New Worm Targets Home Routers, Cable Modems ''. PC World. Retrieved 2009 - 03 - 26. Jump up ^ `` Alureon trojan caused Windows 7 BSoD ''. microsoft.com. February 18, 2010. Retrieved 2010 - 02 - 18. Jump up ^ `` VirusBlokAda News ''. Anti-virus.by. Retrieved 2012 - 03 - 29. Jump up ^ Gregg Keizer ( 16 September 2010 ). `` Is Stuxnet the ' best ' malware ever ? ''. InfoWorld. Retrieved 16 September 2010. Jump up ^ Stuxnet virus : worm ' could be aimed at high - profile Iranian targets ', Telegraph, 23 Sep 2010 Jump up ^ `` Possible New Rootkit Has Drivers Signed by Realtek ''. Kaspersky Labs. 15 July 2010. Jump up ^ Harvison, Josh ( September 27, 2010 ). `` Blackmail virus infects computers, holds information ransom ''. kait8.com. Retrieved 20 November 2010. Jump up ^ `` Bastard child of SpyEye / ZeuS merger appears online ''. The Register. 2011. Retrieved April 11, 2011. Bastard child of SpyEye / ZeuS merger appears online Jump up ^ `` SpyEye mobile banking Trojan uses same tactics as ZeuS ''. The Register. 2011. Retrieved April 11, 2011. SpyEye mobile banking Trojan uses same tactics as ZeuS Jump up ^ `` XP AntiSpyware 2011 -- Virus Solution and Removal ''. Precisesecurity.com. Retrieved 2012 - 03 - 29. Jump up ^ `` Morto Worm Spreads to Weak Systems ''. blogs.appriver.com. 2011. Jump up ^ `` Morto Post Mortem : Dissecting a Worm ''. blog.imperva.com. 2011. Jump up ^ `` Laboratory of Cryptography and System Security ( CrySyS ) ''. Retrieved 4 November 2011. Jump up ^ `` Duqu : A Stuxnet - like malware found in the wild, technical report '' ( PDF ). Laboratory of Cryptography of Systems Security ( CrySyS ). 14 October 2011. Jump up ^ `` Statement on Duqu 's initial analysis ''. Laboratory of Cryptography of Systems Security ( CrySyS ). 21 October 2011. Archived from the original on 3 October 2012. Retrieved 25 October 2011. Jump up ^ `` W32. Duqu -- The precursor to the next Stuxnet ( Version 1.4 ) '' ( PDF ). Symantec. 23 November 2011. Retrieved 30 December 2011. Jump up ^ `` sKyWIper : A Complex Malware for Targeted Attacks '' ( PDF ). Budapest University of Technology and Economics. 28 May 2012. Archived ( PDF ) from the original on 30 May 2012. Retrieved 29 May 2012. Jump up ^ `` NGRBot '', Enigma Software Group, 15 October 2012. Retrieved 9 September 2013. Jump up ^ `` Dissecting the NGR bot framework : IRC botnets die hard '', Aditya K. Sood and Richard J. Enbody, Michigan State University, USA, and Rohit Bansal, SecNiche Security, USA, with Helen Martin1 ( ed. ), January 2012. Retrieved 9 September 2013. ( subscription required ) Jump up ^ Goodin, Dan ( 2013 - 11 - 27 ). `` New Linux worm targets routers, cameras, `` Internet of things '' devices ``. Ars Technica. Retrieved October 24, 2016. Jump up ^ Sterling, Bruce ( 2014 - 01 - 29 ). `` Linux. Darlloz, the Internet - of - Things worm ''. Wired. Retrieved 24 October 2016. Jump up ^ `` Attack of Things ! ''. Level 3 Threat Research Labs. 25 August 2016. Retrieved 6 November 2016. Jump up ^ Ballano, Mario ( 1 Oct 2015 ). `` Is there an Internet - of - Things vigilante out there ? ''. Symantec. Retrieved 14 November 2016. Jump up ^ Das, Samburaj ( October 2, 2015 ). `` Linux. Wifatch : Vigilante Hacker Infects Routers with Malware to Fight Bad Malware ''. hacked.com. Retrieved 14 November 2016. Jump up ^ `` linux. wifatch ''. The White Team. October 5, 2015. Retrieved 15 November 2016. Jump up ^ Cimpanu, Catalin ( Oct 7, 2015 ). `` Creators of the Benevolent Linux. Wifatch Malware Reveal Themselves ''. Softpedia. Retrieved 14 November 2016. Jump up ^ `` Ransomware : Erpresserische Schadprogramme '', bsi-fuer-buerger.de, 9 February 2016. Retrieved 10 March 2016. Jump up ^ `` Locky ransomware on aggressive hunt for victims '', Symantec.com, 18 February 2016. Retrieved 10 March 2016. Jump up ^ `` Antivirus scan for ( Locky ) '', virustotal.com, 16 February 2016. Retrieved 10 March 2016. Jump up ^ danielevir ( 19 September 2014 ). `` ' Tiny Banker ' Malware Attempted At Customers Of US Banks ''. Massive Alliance. Retrieved 10 September 2017. Jump up ^ `` Modified Tiny Banker Trojan Found Targeting Major U.S. Banks ''. Entrust, Inc. Jump up ^ Jeremy Kirk ( 15 September 2014 ). `` ' Tiny banker ' malware targets US financial institutions ''. PCWorld. Jump up ^ `` ' Tiny Banker ' Malware Targets Dozens of Major US Financial Institutions ''. The State of Security. Jump up ^ `` Tiny ' Tinba ' Banking Trojan Is Big Trouble ''. msnbc.com. Jump up ^ The Economist, 8 October 2016, The internet of stings Jump up ^ Bonderud, Douglas ( October 4, 2016 ). `` Leaked Mirai Malware Boosts IoT Insecurity Threat Level ''. securityintelligence.com. Retrieved 20 October 2016. Jump up ^ `` Today the web was broken by countless hacked devices ''. theregister.co.uk. 21 October 2016. Retrieved 24 October 2016. Jump up ^ `` Blame the Internet of Things for Destroying the Internet Today ''. Motherboard. VICE. Retrieved 27 October 2016. Jump up ^ Wong, Julia Carrie ; Solon, Olivia ( 2017 - 05 - 12 ). `` Massive ransomware cyber-attack hits 74 countries around the world ''. The Guardian. ISSN 0261 - 3077. Retrieved 2017 - 05 - 12. Jump up ^ Solon, Olivia ( 2017 - 05 - 13 ). `` ' Accidental hero ' finds kill switch to stop spread of ransomware cyber-attack ''. The Guardian. ISSN 0261 - 3077. Retrieved 2017 - 05 - 13. Jump up ^ Khandelwal, Swati. `` It 's Not Over, WannaCry 2.0 Ransomware Just Arrived With No ' Kill - Switch ' ''. The Hacker News. Retrieved 2017 - 05 - 14. Jump up ^ `` Petya ransomware outbreak : Here 's what you need to know ''. Retrieved 10 September 2017. Jump up ^ `` Ransom. Petya - Symantec ''. www.symantec.com. Retrieved 10 September 2017. Jump up ^ `` ' Petya ' Ransomware Outbreak Goes Global -- Krebs on Security ''. krebsonsecurity.com. Retrieved 10 September 2017. Jump up ^ `` New malware steals users ' money through mobile phones : Report ''. 10 September 2017. Retrieved 10 September 2017 -- via The Economic Times. Jump up ^ `` Xafecopy Trojan, a new malware detected in India ; it disguises itself as an app to steals money via mobile phones ''. Tech2. Retrieved 10 September 2017. Jump up ^ `` Kedi RAT can steal your information and send it through gmail ''. Jump up ^ `` Beware the Kedi RAT pretending to be a Citrix file that Gmails home ''. Jump up ^ `` Kedi RAT can steal your information and send it through Gmail ''. External links Snopes -- Compilation of viruses, worms, and Trojan horses at snopes.com. A short history of hacks, worms and cyberterror by Mari Keefe, Computerworld, April 2009 5th Utility Ltd list of the worst computer viruses of all time Malware topics Infectious malware Computer virus Comparison of computer viruses Computer worm List of computer worms Timeline of computer viruses and worms Concealment Trojan horse Rootkit Backdoor Zombie computer Man - in - the - middle Man - in - the - browser Man - in - the - mobile Clickjacking Malware for profit Privacy - invasive software Adware Spyware Botnet Keystroke logging Form grabbing Web threats Fraudulent dialer Malbot Scareware Rogue security software Ransomware Crimeware By operating system Linux malware Palm OS viruses Mobile malware Macro virus Classic Mac OS viruses MacOS malware iOS malware Android malware Protection Anti-keylogger Antivirus software Browser security Internet security Mobile security Network security Defensive computing Firewall Intrusion detection system Data loss prevention software Countermeasures Computer and network surveillance Operation : Bot Roast Honeypot Retrieved from `` https://en.wikipedia.org/w/index.php?title=Timeline_of_computer_viruses_and_worms&oldid=820762741 '' Categories : Computing timelines Malware Computer security exploits Trojan horses Hidden categories : Pages using citations with accessdate and no URL All articles with dead external links Articles with dead external links from December 2017 Articles with permanently dead external links CS1 German - language sources ( de ) Pages containing links to subscription - only content Articles needing cleanup from November 2015 All pages needing cleanup Cleanup tagged articles with a reason field from November 2015 Wikipedia pages needing cleanup from November 2015 Articles with specifically marked weasel - worded phrases from May 2017 Wikipedia articles needing clarification from May 2017 All articles with failed verification Articles with failed verification from May 2017 Articles with failed verification from December 2013 Talk Contents About Wikipedia Lumbaart Bahasa Melayu 日本 語 Русский Srpskohrvatski / српскохрватски Suomi Українська 中文 Edit links This page was last edited on 16 January 2018, at 13 : 28. Text is available under the Creative Commons Attribution - ShareAlike License ; additional terms may apply. By using this site, you agree to the Terms of Use and Privacy Policy. Wikipedia ® is a registered trademark of the Wikimedia Foundation, Inc., a non-profit organization. About Wikipedia

Question: when was the first trojan horse virus discovered
Answer: ANIMAL