... The most advanced and trickiest form of a DoS attack is the Distributed Denial of Service Attack (DDoS), which occurs when hundreds of thousands of computers are manipulated by computer virus programs to attack a targeted system all at once. Meanwhile, a similar DoS attack hit The Korea Times Web site between Wednesday and Thursday. The newspaper has found that the attack ... 기사보기

The Festering Hate, Apple, ProDOS virus spreads from underground pirate BBS systems and starts infecting mainstream networks. Festering Hate and CyberAIDS are the names of the first two Apple, ProDOS viruses. Cyber AIDS appears to have been a series of viri with minor changes in the code, culminating in the final version called Festering Hate, which appeared in 1988 (The Festering Hate World Tour - Festering Hate in '88). When the virus went off the title page credited "Rancid Grapefruit" and "Cereal Killer" of the "Kool/Rad Alliance!" The phone number embedded in the detonation page was apparently the home number of John Maxfield (a.k.a., Cable Pair) a well-known FBI informant and private investigator of the era, whose speciality was computer crime and hackers. Unlike the few Apple viri that had come before, such as the Elk Cloner virus, that were essentially annoying but did no damage. The Festering Hate series of viri was extremely destructive, spreading to all system files it could find on the host computer (hard drive, floppy and system memory) and then destroying everything when it could no longer find any uninfected files.

The SCA virus, a boot sector virus for Amigas appears, immediately creating a pandemic virus-writer storm. A short time later, SCA releases another, considerably more destructive virus, the Byte Bandit.The SCA virus was the first computer virus created for the Commodore Amiga. It appeared in November 1987. The SCA virus was a boot sector virus. It featured a quite famous line of text that appeared at every 15th reboot: Something wonderful has happened; Your AMIGA is alive !!! and, even better...; Some of your disks are infected by a VIRUS !!! Another masterpiece of The Mega-Mighty SCA !! "SCA" is an acronym for the Swiss Cracking Association, a group engaged in software protection removal, so the geographic origin of the virus was Switzerland. The virus was probably authored by an SCA member known as "CHRIS". SCA would not harm disks per-se, but would spread to any write-enabled floppies inserted. If they used custom bootblocks (such as games), they would be rendered unusable. SCA also checksums as an original filesystem (OFS) bootblock so would destroy newer filesystems if the user didn't know the proper use of the "install" command to remove SCA ("install df0: FFS FORCE" to recover a 'fast filesystem' floppy). The "Mega-Mighty SCA" produced the first Amiga virus checker which killed the SCA virus. This may well have been in response to estimates that approximately 40% of all Amiga users had SCA in their disk collection somewhere, due to rampant piracy. Other authors inspired by the harmless SCA virus would later produce more destructive viruses known as the Byte Bandit and the Byte Warrior.

The Jerusalem virus, part of the (at that time unknown) Suriv family, is detected in the city of Jerusalem. Jerusalem destroys all executable files on infected machines upon every occurrence of Friday the 13th (except Friday the 13th Nov 1987 making its first trigger date May 13th 1988). Jerusalem caused a worldwide epidemic in 1988. Jerusalem is a DOS file virus first detected in Jerusalem, Israel, in October 1987. Upon infection, the Jerusalem virus became memory resident, and would then infect every executable file run. The program contained one destructive payload that was set to go off on Friday the 13th, all other years than 1987. On that date, the virus would delete every program file that was executed. Jerusalem is also known as BlackBox because of a black box it displays during the payload sequence. Jerusalem was initially very common (for a virus of that time of the day) and spawned a large number of variants. However, since the advent of Windows, Jerusalem and its variants have become obsolete.  

Appearance of Lehigh virus, boot sector viruses such as Yale from USA, Stoned from New Appearance of Lehigh virus, boot sector viruses such as Yale from USA, Stoned from New Zealand, Ping Pong from Italy, and appearance of first self-encrypting file virus, Cascade. Lehigh was never released to the wild however. A subsequent infection of Cascade in the offices of IBM Belgium led to IBM responding with its own antivirus product development. Prior to this, antivirus solutions developed at IBM were intended for staff use only.  

Ralf Burger presented the Virdem model of programs at a meeting of the underground Chaos Computer Club in Germany. The Virdem model represented the first programs that could replicate themselves via addition of their code to executable DOS files in COM format. The Chaos Computer Club (CCC) is one of the biggest and most influential hacker organisations. The CCC is based in Germany and other German-speaking countries and currently has about 1,500 members. The CCC describes itself as "a galactic community of life's beings, independent of age, sex, race or societal orientation, which strives across borders for freedom of information…." In general, the CCC struggles for more transparency in governments, freedom of information and a human right to communication. Supporting the principles of the hacker ethic, the club also fights for free access to computers and technological infrastructure for everybody.  

The Brain boot sector virus (aka Pakistani flu) is released to the wild. Brain is considered the first IBM PC compatible virus, and the program responsible for the first IBM PC compatible virus epidemic. The virus is also known as Lahore, Pakistani, Pakistani Brain, as it was created in Lahore, Pakistan by 19 year old Pakistani programmer, Basit Farooq Alvi and his brother Amjad Farooq Alvi. Brain (the industry standard name being Brain) is a 1987 computer virus that infects DOS FAT file systems. The virus is also known as Lahore, Pakistani, Pakistani Brain, and UIUC. Brain is a boot sector infector that moves the boot sector and replaces it with a copy of the virus. The real boot sector is moved to another sector and marked as bad. The Disk label is also changed to (c)Brain. Infected disks have 3kb of bad sectors. The following text can be seen in infected boot sectors: "Welcome to the Dungeon (c) 1986 Brain & Amjads (pvt) Ltd VIRUS_SHOE RECORD V9.0 Dedicated to the dynamic memories of millions of viruses who are no longer with us today - Thanks GOODNESS!! BEWARE OF THE er..VIRUS : this program is catching program follows after these messages....$#@%$@!!" There are many minor and major variations to that version of the text. The virus slows down the floppy disk drive and makes 7KB of memory unavailable to DOS. This virus was written by two brothers who lived in Chahmiran, Lahore, Pakistan. The brothers told TIME magazine they had written it to protect their medical software from software pirates. The virus, supposedly, was going to target copyright infringers only. The virus came complete with the brothers' real address and three phone numbers, and a message that said the user's machine had been infected and for inoculation the user should call them. The following message was: "Welcome to the Dungeon (c) 1986 Basit * Amjad (pvt) Ltd. BRAIN COMPUTER SERVICES 730 NIZAM BLOCK ALLAMA IQBAL TOWN LAHORE-PAKISTAN PHONE: 430791,443248,280530. Beware of this VIRUS.... Contact us for vaccination..." When they started getting a ton of phone calls from people in USA, Britain, and elsewhere, demanding them to disinfect their machines, the brothers were stunned and tried to explain to the outraged callers that their motivation had not been malicious. They ended up having to get their phone lines cut off and regretted that they had revealed their contact info in the first place. The brothers are still in business in Pakistan as ISPs in their company called Brain Limited.

At Lehigh University, Cohen demonstrates a virus-like program on a VAX11/750 system. The program was able to install itself to, or infect, other system objects. VAX is a 32-bit computing architecture that supports an orthogonal instruction set (machine language) and virtual addressing (i.e. demand paged virtual memory). It was developed in the mid-1970s by Digital Equipment Corporation (DEC). DEC was later purchased by Compaq, which in turn was purchased by Hewlett-Packard. The VAX has been perceived as the quintessential CISC processing architecture, with its very large number of addressing modes and machine instructions, including instructions for such complex operations as queue insertion/deletion and polynomial evaluation.  

The term 'virus' is coined by Frederick Cohen in describing self-replicating computer programs. In 1984 Cohen uses the phrase "computer virus" – as suggested by his teacher Leonard Adleman – to describe the operation of such programs in terms of "infection". He defines a 'virus' as "a program that can 'infect' other programs by modifying them to include a possibly evolved copy of itself."

A program called Elk Cloner, written for Apple II systems and created by Richard Skrenta. Apple II was seen as particularly vulnerable due to the storage of its operating system on Floppy disk. Elk Cloner's design combined with public ignorance about what malware was and how to protect against it led to Elk Cloner being responsible for the first large-scale computer virus outbreak in history. Elk Cloner is the first known computer virus that has spread "in the wild", i.e., outside the computer system or lab it was written in. It was written around 1982 by a 15-year-old high school student named Rich Skrenta for Apple II systems. Elk Cloner spread by infecting the Apple II's operating system, stored on floppy disks. When the computer was booted from an infected floppy, a copy of the virus would automatically start. 

The virus would not normally alter the working of the computer, except from monitoring disk access. When an uninfected floppy was accessed, the virus would copy itself to the disk, thus infecting it, too, slowly spreading from floppy to floppy. Like many of the early viruses, Elk Cloner did not cause any deliberate harm, although it could harm disks not containing the standard DOS image - it overwrote its reserved tracks regardless of the contents. Like many of the early viruses, however, it did cause annoyance: on every 50th booting the virus would display a short "poem", as follows: Elk Cloner: The program with a personality It will get on all your disks It will infiltrate your chips Yes it's Cloner! It will stick to you like glue Annoyance in fact was the reason of the virus. Its 15-year-old author previously had the habit of giving out pirated computer games to his friends, but games modified such that they would stop working after a given number of games. This scheme guaranteed a high level of annoyance: by the time those friends grew to like the programs the programs would stop working, usually with some "humorous" message (at least as judged by their author). After a while those friends learned never to allow Skrenta near their disks. Then came Cloner, which could annoy friends without Skrenta physically gaining access to their disks. According to contemporary reports, the virus was rather contagious, successfully infecting the floppies of most people Skrenta knew (including his math teacher), upsetting many of them (including said math teacher). Part of the "success", of course, was that people were not at all wary of the potential problem (virus infection could have been avoided by not inserting floppies into computers without hard-booting them before), nor were virus scanners or cleaners available. The virus could still be removed, but it required an elaborate manual effort.  

Pervading Animal, a game written for the UNIVAC 1108, appeared. It remains a matter of debate whether Pervading Animal represented the first Trojan or an innocent game with unintended bugs.The UNIVAC 1108 was the second member of Sperry Rand's UNIVAC 1100 series of computers, introduced in 1964. Integrated circuits replaced the thin film memory that the UNIVAC 1107 used for register storage. Smaller and faster cores were used for main memory.

Creeper virus was detected on ARPANET infecting the Tenex operating system. Creeper gained access independently through a modem and copied itself to the remote system where the message, 'I'M THE CREEPER : CATCH ME IF YOU CAN.' was displayed. The Reaper program, itself a virus, was created to delete Creeper, the creators of both programs are unknown.