Loading malware…
Elk Cloner is an early Apple II computer virus written by Rich Skrenta around 1982 as a prank. It is widely regarded as one of the first microcomputer viruses to spread in the wild. The virus infects Apple DOS 3.3 through the boot process: booting from an infected floppy loads the virus into memory, after which it propagates by copying a modified DOS image to other disks inserted into the system. It marks infected disks to avoid repeated infection. Elk Cloner triggered nuisance behavior at specified execution counts and displayed a poem every 50th execution. Although it was not designed to deliberately destroy data, its disk-writing behavior could overwrite reserved tracks on non-standard Apple DOS disks and cause data loss. It circulated primarily through shared floppy disks, including game disks, among Apple II users.
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
2 distinct techniques documented for this family, organized by ATT&CK tactic.
21 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
An early self-replicating Apple II virus that spread via floppy disks and displayed a message to users; described as the first known personal-computer virus to spread in the wild.
Named 1980s-era malware (listed as part of a historical timeline). No behavior details provided in the content.
Early computer virus (only referenced by name in the 1980s malware timeline; no additional details provided).
An early self-replicating personal computer virus, historically notable as the first virus to spread in the wild among personal computers.
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.