The first computer virus was created by a USC doctoral candidate in 1983

A year after creating malware in a controlled experiment that multiplied until it took over all of a computer's memory, Fred Cohen went public with his research and its risks. He called the self-replicating software a "computer virus," a term Cohen's advisor, Leonard Adleman, coined to describe its infectious behavior. (Some readers may experience a paywall.)

Many early computer viruses were not created for malicious purposes

Besides those authored in research labs as proofs of concept for self-replicating software, hobbyists would create malware that played music or displayed text and animations that intentionally revealed the infection as a means of showing off, rather than hiding their spread.

The Chernobyl virus earned its name for activating on the meltdown's anniversary

Affecting Windows 95 and 98 computers, it filled gaps in the code of any program opened after infecting a computer, earning it the nickname "Spacefiller." On April 26, 1999, the virus overwrote part of the software responsible for booting up a computer, rendering it unusable.

The history of malware includes computer viruses, worms, trojans, and ransomware

Some of the earliest significant pieces of malware—the Creeper worm and the Elk Cloner virus—displayed silly messages to users without causing major harm. As computer science has advanced, malware has become more easily spread, incorporated social engineering to manipulate users, targeted infrastructure systems, and been used by governments for virtual espionage.

The foundation for computer viruses was published after its creator's death

In the late 1940s, Hungarian American mathematician, scientist, and engineer John von Neumann gave a series of lectures where he explained the theoretical framework for a computer program that could replicate itself—the von Neumann Universal Constructor. His lectures were later compiled and published in 1966, nine years after his death from cancer.

Some viruses evade detection by altering their own code or hiding in Microsoft Office

Computer viruses are often classified by how they spread or which files they infect, with the oldest ones—boot sector viruses—targeting systems that are active when a computer is turned on. Macros—custom codes in office productivity programs authored to automate tasks—spawned their own class of viruses.

The ILOVEYOU virus exemplified how social engineering could help spread malware

Displaying as LOVE-LETTER-FOR-YOU.TXT on Windows computers, the file appeared to be a love letter, which many users willingly opened. However, the file contained a script that damaged and hid files, caused Internet Explorer to download software to help steal passwords, and copied itself to all Outlook contacts to continue spreading.

Computer viruses' hijacking abilities led them to be named after biological viruses

Just as their counterparts infect cells and take control of cellular processes to replicate endlessly, computer viruses cannot replicate on their own and must copy their code into host software before duplicating when the program or file is opened. The term "virus" comes from the Latin word for "venom."

Logic bomb viruses can awaken from a dormant phase without human input

Theoretically, computer viruses can remain idle indefinitely while awaiting specific user actions, as instructed by their code. However, logic bombs—embedded code that triggers when specific conditions are met—can automatically execute viruses, such as when a certain date or time is reached.

A computer virus is a type of malware that self-replicates and spreads

Spread through emails, downloads, messaging services, and outdated software, viruses attach to programs, self-replicate, and infect other systems. They can delete files, steal data, and cause performance issues as they spread.

The Melissa 'virus' helped associate pornographic sites with computer viruses

A worm-embedded document posted online enticed users to download and open it by alleging to contain passwords to paywalled explicit websites. Upon opening, the worm shared itself with 50 addresses in a user's Outlook contacts, masquerading as a friendly attachment. Its rapid spread overwhelmed email servers and caused $1.1B in damage worldwide.

Computer viruses can slow systems by allocating resources to malicious actions

Once infected software is run, instructions in the malicious code within the program or file can copy the code to various locations, exacerbating the infection and producing additional symptoms, such as slow performance, altered login credentials, changes to device settings, and system crashes.

Explore demonstrations of hundreds of viruses and other malware in action

On their YouTube channel, Malware historian Daniel White has documented what happens when various types of malware—mostly from the 1980s and 90s—run on a computer or Nokia cell phone. The demonstrations were safely conducted within virtual machines—older operating systems run within contained windows of modern software, resembling a picture-in-picture setup.

Safely explore historic viruses and other malicious software in the Malware Museum.

Modern antivirus software searches for malicious behavior alongside malicious code

The first viral infections were identified by comparing the computer code of programs and files with a database of known virus codes, a method known as signature detection. The ongoing creation of new malware made databases continuously outdated, leading to the development of systems that detect patterns consistent with known viral activity.

Explore the cost of major viruses and other malware incidents through 2017

The first significant malware was the Morris worm in 1988, which caused an estimated $10,000 to $10M in damage to computers. With $38B in damage caused, Mydoom is the most costly piece of malware in history. Spread via email and, at one point, accounting for about 25% of all messages sent worldwide, the malware infected computers to create a botnet that launched cyberattacks.

Peter Norton, for whom Norton Antivirus is named, questioned the threat of viruses

The software author was among several computer experts in 1988 who suggested that reports on the threat of computer viruses were exaggerated, referring to testimonials of infections and their spread as "urban legends."

Malware has transitioned from notoriety-driven to profit- and data-driven

Many of the first researchers and hobbyists who created viruses and worms showed a natural curiosity in experimenting with and designing such software to make a name for themselves and advance the field of computer science. In the future, AI-augmented malware may adapt in real-time or design enhanced cryptojackers, infostealers, and ransomware for cybercriminals.

In 2015, a custom virus program was used to destroy and transform art images

At the Art Laboratory Berlin's "bOdy pandemOnium: Immersion into Noise" exhibit, Chicago-born artist Joseph Nechvatal explored viractualism—the interface between the biological and the technological—via a custom virus program that randomly altered images representing the human eye and rectum.

Creating malware requires more than knowledge of programming languages

Because computer viruses, worms, and other malicious software reside within a computer's operating system, which manages computer hardware and software, cybercriminals writing effective malicious code must understand how the OS manages input and output, permissions, memory, etc. Knowledge of credentials and network access also helps create malware that easily spreads.

View a list of simple ways you can avoid catching a computer virus

Because this type of malware requires human intervention, such as plugging an infected flash drive into a computer or downloading and running an infected file, the chance of infection can be greatly reduced by being cautious about unfamiliar emails, attachments, and links. Keeping systems up to date with the latest security fixes is also crucial.

Different types of malware are categorized by how they spread or operate

Computer viruses require user interaction to execute a file and spread, whereas worms can self-replicate across systems without human intervention. Ransomware locks systems until a key is provided, spyware tracks and reports user activity to a third party, and trojans disguise various types of malware as legitimate software.

The virus was officially described for the first time in 1789

Michael Underwood, an English physician and surgeon, was the first to describe the disorder, noting it caused disability in the lower extremities in children. Large-scale outbreaks of the disease were not observed until the late 19th century.

Read an oral history of the Y2K panic

This oral history brings together programmers, engineers, and officials who first identified the date flaw and then spent years alerting the public to the danger and racing to repair millions of lines of code.

Watch how the Enigma machine encrypts messages and learn about its critical design flaw

Using settings selected from a series of rotors and a plugboard that let operators swap letters with any of their choosing, the machine lit up the output letter for each letter typed. While this system could generate messages requiring any of 150 quintillion potential keys, the machine's reflector never encrypted a letter as itself, providing an entry point for exploiting the system.

In 2019, a laptop loaded with six of the worst malware in history and described as 'an exhibit of historical weaponry' sold for $1.3M.

Every virus is classified into 7 groups based on genetic differences

Viruses infecting humans have been named based on symptoms ("chickenpox") or the location or animal in which they were first discovered ("Bolivian Haemorrhagic Fever" and "Monkeypox"). For clarity among scientists and to reduce stigma, virologists classify the 15,000 known viruses (270 of which infect humans) by their basic genetic material.

A timeline of how Claude Code was used to execute cyberespionage

In September 2025, a Chinese state-sponsored group targeted 30 large tech companies, financial institutions, chemical manufacturing companies, and government agencies by manipulating Claude Code, having succeeded in infiltrating a small subset. The cyberattack is believed to have been the first of its scale carried out without major human intervention.

One of Apple's first computers sold for $375K at an auction

An operational Apple I, the first model of personal computer made by Apple, sold for $375K at an auction. The machine was first sold in 1976 and has a handwritten serial number by Steve Jobs himself. The auction, provided rare insight into the beginnings of the influential tech company.

Read Linus Torvalds' commenting on his first posts about Linux in the comp.os.minix newsgroup

On August 1, 1991, he posted a request on what would be the first version of Linux, writing, "I'm doing a (free) operating system (just a hobby, won't be big and professional like gnu) for 386(486) AT clones. [...] I'd like any feedback on things people like/dislike in minix, as my OS resembles it somewhat."

The first compiler to facilitate communication with computers was developed by Grace Hopper

The A-0 program linker automatically translated mathematical symbols into machine-readable binary code. Although it took two years for computer executives to get on board with the idea, the technology was foundational to future programming languages that allowed computers to understand commands written in word-based languages.

The world's first chatbot, ELIZA, was developed in the 1960s as a technical demonstration exploring human-computer communication, with one of its scripts allowing it to emulate a psychotherapist.

Office Assistants, including Clippy, were digitally edited with Macintosh computers

The animated characters served as intelligent user interfaces for Microsoft Office and were sketched by hand before being scanned. Clippy was selected as the default assistant after social psychologists at Stanford University identified it as the most trustworthy, likable, and humorous character based on public testing.

Microsoft's initial successes came from promising products that did not yet exist

In discussions with teams responsible for MITS's Altair 8800 and IBM's PC, Bill Gates and Paul Allen claimed to have created ready-to-use software. Code for the former was not completed until Paul Allen's flight to MITS' headquarters, where the software was successfully tested for the first time.

Watch Bill Gates trigger the Blue Screen of Death during a Windows 98 demo

During a live Windows 98 demo at a computer trade show, Bill Gates watched as the system crashed with the infamous “Blue Screen of Death”—a critical Windows error screen signaling a system failure—midway through the presentation.

FLOW-MATIC was the first programming language resembling the English language

As part of the team working on UNIVAC—the first commercially produced electronic digital computer in the US—Grace Hopper helped develop the system that enabled nonprogrammers and businesspeople without a strong mathematics background to use the machine effectively, thereby enhancing the computer's commercial viability.

The first major norovirus outbreak, in 1968, sickened half an elementary school.