Ransomware Turns 35, How Terrible Was the World's First Attack?

The "AIDS" floppy disk is credited as the world's first ransomware attack.

Thirty-five years ago, a floppy disk containing malware unleashed terror on thousands of computer users, marking the beginning of ransomware.

The origin of ransomware started with a floppy disk.

In 1990, when awareness of computer viruses was still very limited, Dr. Joseph Lewis Andrew Popp Jr. took advantage of the fear of the AIDS epidemic to spread the world's first ransomware. Through floppy disks called "AIDS Information - Introductory Diskette 2.0", this malware infected about 20,000 computers, encrypting data and demanding victims pay a ransom to get it back.

While the tactic was relatively simple compared to today's sophisticated ransomware attacks, at the time it caused significant damage to many organizations, including an Italian medical institution that lost 10 years of valuable research data.

Dr. Popp was later arrested, but avoided jail time due to his bizarre behavior. He wore a condom on his nose, carried a cardboard box, and exhibited other unusual behavior that led a psychiatrist to conclude that he was not sane enough to stand trial.

However, the careful planning of the attack, coupled with the significant investment in distributing the floppy disks and registering a "bogus" company in Panama, has led many to doubt Popp's true mental state.

Regardless, the incident has become a milestone in the history of cybersecurity, marking the emergence of ransomware - an increasingly dangerous and widespread threat in today's digital world.