Skip to content

DEF CON 34 talks are here: 354 talks, summarized and searchable.

Browse DEF CON 34

The History of Malware- From Floppies to Droppers

Eliad Kimhy

MalwareCommon Ground55 minBeginnerOpen on YouTube ↗

Where

Common Ground
BSides Las Vegas

Duration

55 min

Traces malware from 1980s boot sector viruses and floppy-disk ransomware through macro viruses and botnets to modern droppers.

Summary

The talk opens with the 1989 AIDS Trojan, which was distributed on floppy disks and locked victims' files until a ransom was paid. From there the speaker follows how malware moved from a curiosity into a serious threat. Early programs such as Creeper and Reaper, and a 1984 magazine column that exposed readers to real viruses, show how the idea of self-replicating code took hold. The talk then covers DOS boot sector viruses, polymorphic infectors, and destructive payloads, noting how each era combined novelty with growing damage.

The middle section covers the shift to networks and documents. Macros in Office 95 enabled macro viruses, and Melissa and later worms spread through email at a scale that disrupted large companies. Remote access trojans such as NetBus and Back Orifice made backdoors common, and combining worms with command-and-control channels produced botnets. Those botnets were monetized through spam, denial-of-service rental, and banking theft, and ransomware eventually became a final payload dropped onto infected machines.

The closing part links this history to the present. Cryptocurrency and widely exploitable vulnerabilities made ransomware more profitable, and the speaker suggests AI-assisted malware may follow the same pattern, where early experiments later become serious threats. The practical takeaway is that many current attack chains still reuse old techniques, such as macros delivered through phishing, so understanding past malware helps explain today's defenses.

Related talks