In 2019, a laptop loaded with six of the worst malware in history and described as 'an exhibit of historical weaponry' sold for $1.3M.

Explore the cost of major viruses and other malware incidents through 2017

The first significant malware was the Morris worm in 1988, which caused an estimated $10,000 to $10M in damage to computers. With $38B in damage caused, Mydoom is the most costly piece of malware in history. Spread via email and, at one point, accounting for about 25% of all messages sent worldwide, the malware infected computers to create a botnet that launched cyberattacks.

Watch a guided video tour of the Museum of Malware Art

The site includes installations, sculptures, textiles, musical pieces, and galleries inspired by malicious software and related technologies, including the ILOVEYOU virus, encryption protocols from ransomware attacks, and the Industroyer malware framework used by Russia to cut power to Ukraine.

Malware has transitioned from notoriety-driven to profit- and data-driven

Many of the first researchers and hobbyists who created viruses and worms showed a natural curiosity in experimenting with and designing such software to make a name for themselves and advance the field of computer science. In the future, AI-augmented malware may adapt in real-time or design enhanced cryptojackers, infostealers, and ransomware for cybercriminals.

The history of malware includes computer viruses, worms, trojans, and ransomware

Some of the earliest significant pieces of malware—the Creeper worm and the Elk Cloner virus—displayed silly messages to users without causing major harm. As computer science has advanced, malware has become more easily spread, incorporated social engineering to manipulate users, targeted infrastructure systems, and been used by governments for virtual espionage.

Explore demonstrations of hundreds of viruses and other malware in action

On their YouTube channel, Malware historian Daniel White has documented what happens when various types of malware—mostly from the 1980s and 90s—run on a computer or Nokia cell phone. The demonstrations were safely conducted within virtual machines—older operating systems run within contained windows of modern software, resembling a picture-in-picture setup.

Safely explore historic viruses and other malicious software in the Malware Museum.

In 2015, a custom virus program was used to destroy and transform art images

At the Art Laboratory Berlin's "bOdy pandemOnium: Immersion into Noise" exhibit, Chicago-born artist Joseph Nechvatal explored viractualism—the interface between the biological and the technological—via a custom virus program that randomly altered images representing the human eye and rectum.

Many early computer viruses were not created for malicious purposes

Besides those authored in research labs as proofs of concept for self-replicating software, hobbyists would create malware that played music or displayed text and animations that intentionally revealed the infection as a means of showing off, rather than hiding their spread.

The worst cyberattacks of the last 10 years

It’s been a rough 10 years in cybersecurity—and it’s only getting worse. From the Stuxnet to the Sony Hack, learn about the worst cyberattacks over the last decade.

The Melissa 'virus' helped associate pornographic sites with computer viruses

A worm-embedded document posted online enticed users to download and open it by alleging to contain passwords to paywalled explicit websites. Upon opening, the worm shared itself with 50 addresses in a user's Outlook contacts, masquerading as a friendly attachment. Its rapid spread overwhelmed email servers and caused $1.1B in damage worldwide.

Your device can become infected with malware by simply browsing the internet

During a drive-by download attack, security flaws in a program or operating system (e.g., Windows) used to access online content are exploited, and malicious code is downloaded—for example, when loading a hacked webpage—onto a user's device without their knowledge. Restricting internet browsing to safe sites and installing security updates helps prevent these attacks.

Creating malware requires more than knowledge of programming languages

Because computer viruses, worms, and other malicious software reside within a computer's operating system, which manages computer hardware and software, cybercriminals writing effective malicious code must understand how the OS manages input and output, permissions, memory, etc. Knowledge of credentials and network access also helps create malware that easily spreads.

The first computer virus was created by a USC doctoral candidate in 1983

A year after creating malware in a controlled experiment that multiplied until it took over all of a computer's memory, Fred Cohen went public with his research and its risks. He called the self-replicating software a "computer virus," a term Cohen's advisor, Leonard Adleman, coined to describe its infectious behavior. (Some readers may experience a paywall.)

Visualizing cyberattacks by country

Cyber crime is expected to cost the global economy trillions per year by 2025. This data illustration showcases the countries with the most severe cyber attacks from 2006-2020.

The ILOVEYOU virus exemplified how social engineering could help spread malware

Displaying as LOVE-LETTER-FOR-YOU.TXT on Windows computers, the file appeared to be a love letter, which many users willingly opened. However, the file contained a script that damaged and hid files, caused Internet Explorer to download software to help steal passwords, and copied itself to all Outlook contacts to continue spreading.

Crunching the numbers on the cost of ransomware

This blog is a preview of the 2022 Crypto Crime Report, offering a summary of ransomware activity in 2021, the most active strains of ransomware, and more (w/ data, charts, and illustrations).

Visualizing the growth of botnets

Botnets are a network of computers that have been infected with a variant of malware that coordinates and leverages them for automated mass attacks such as data theft and crashing servers. This interactive map highlights where botnets have been located between 2014-2020.

In 2018, it took about 2.3 years to develop a way to exploit a software bug for malicious purposes, but as of 2026, AI tools have reduced this time to about 20 hours.

Marketplaces on the dark web provide eBay-like vendor feedback scores

An HP analysis found that 77% of cybercriminal marketplaces require vendors to purchase a license to sell their products, which can cost up to $3,000. About 92% of these marketplaces also use a third-party dispute-resolution service to handle customer service issues, thereby promoting "honor among thieves."

One of Apple's first computers sold for $375K at an auction

An operational Apple I, the first model of personal computer made by Apple, sold for $375K at an auction. The machine was first sold in 1976 and has a handwritten serial number by Steve Jobs himself. The auction, provided rare insight into the beginnings of the influential tech company.

The first portable laptop had a 5-inch screen and weighed 24.5 pounds

Introduced in 1981 for $1795, the Osborne 1 had no battery but came bundled with almost $1,500 worth of software. Early announcement of a future model stalled sales and bankrupted the company as users waited for the more advanced version, a phenomenon now called the Osborne effect.

Different types of malware are categorized by how they spread or operate

Computer viruses require user interaction to execute a file and spread, whereas worms can self-replicate across systems without human intervention. Ransomware locks systems until a key is provided, spyware tracks and reports user activity to a third party, and trojans disguise various types of malware as legitimate software.

Computer viruses can slow systems by allocating resources to malicious actions

Once infected software is run, instructions in the malicious code within the program or file can copy the code to various locations, exacerbating the infection and producing additional symptoms, such as slow performance, altered login credentials, changes to device settings, and system crashes.

Researchers report that Anthropic's Claude Mythos AI model has identified thousands of high-severity vulnerabilities across various software, including major operating systems and web browsers, and has suggested ways to exploit them.

Visualizing the consequence of data breaches

To get a sense of the grim state of data security today, take a look at this infographic from TruthFinder that explains why 2018 was the year of the data breach tsunami.

Security technician hacks a voting machine to reveal its vulnerabilities

A technician bought an old, likely-decommissioned voting machine from 2013 and took it apart to see how a would-be hacker might be able to exploit its vulnerabilities. Get a sense of the needs for secure, up-to-date voting machines with this...

Watch an ethical hacker provide a tour of the dark web

Cybersecurity researcher John Hammond explores the effectiveness of a dark web search engine, leaks from ransomware group data breaches, and a categorized index of dark web links, including some that are alleged to host malware. Many dark web sites are no longer active or host scams to fool unsuspecting visitors.

Modern antivirus software searches for malicious behavior alongside malicious code

The first viral infections were identified by comparing the computer code of programs and files with a database of known virus codes, a method known as signature detection. The ongoing creation of new malware made databases continuously outdated, leading to the development of systems that detect patterns consistent with known viral activity.

Hackers once used 'Fortnite' to clean money from stolen credit cards

Hackers using stolen credit cards would create "Fortnite" accounts and purchase V-bucks, the in-game currency. The hackers would then sell the entire "Fortnite" account on sites like eBay. For instance, an account with $100 worth of stolen V-bucks might sell $25 on eBay.

A timeline of how Claude Code was used to execute cyberespionage

In September 2025, a Chinese state-sponsored group targeted 30 large tech companies, financial institutions, chemical manufacturing companies, and government agencies by manipulating Claude Code, having succeeded in infiltrating a small subset. The cyberattack is believed to have been the first of its scale carried out without major human intervention.

Explore an interactive timeline of the world's biggest data breaches and hacks, led by the 2024 National Public Data breach, which involved almost three billion stolen records, including full names and Social Security numbers.

Elk Cloner, the first computer virus to spread in public, was written as a practical joke by Richard Skrenta, a Pittsburgh high school student.

Microsoft’s 'Blue Screen of Death' was a symbol of computer crashes for over 30 years

In 2025, the symbol was replaced with a "Black Screen of Death" for improved readability and alignment with Windows 11's modern design. It became a pop culture symbol after appearing in Bill Gates' live tech demo of Windows 98.

Fraud and identity theft are among the most common dark web-related crimes.

Palantir once investigated a cyberattack on the Dalai Lama's computer

In 2008, officials realized the Dalai Lama's email had been hacked after details of an event that hadn't been made public yet began circulating. Palantir's software was able to identify both the hack and the hacker network.

Explore a breakdown of 18 influential Apple products

The launch of the MacBook Air in 2008 popularized the ultrabook category of laptops, while the iPad (2010) made large-screen mobile devices a technological norm. The iPhoneX (2017) introduced the notch, which has become a staple at the top of many smartphone displays.

View a list of simple ways you can avoid catching a computer virus

Because this type of malware requires human intervention, such as plugging an infected flash drive into a computer or downloading and running an infected file, the chance of infection can be greatly reduced by being cautious about unfamiliar emails, attachments, and links. Keeping systems up to date with the latest security fixes is also crucial.

Priceless paintings were quickly taken during a 2008 raid of a Zurich museum

Three men walked into Emil Bührle Foundation during open hours. One of the men pulled out a loaded gun and forced the museum staff to the floor, while the others stole four paintings close to the door. The stolen paintings included a Degas, a Monet, a Van Gogh, and a Cezanne, totaling a whopping $160M in stolen art.

Watch Bill Gates trigger the Blue Screen of Death during a Windows 98 demo

During a live Windows 98 demo at a computer trade show, Bill Gates watched as the system crashed with the infamous “Blue Screen of Death”—a critical Windows error screen signaling a system failure—midway through the presentation.