Bestiary
Malware and criminal groups through history, sorted into circles. Described, never celebrated.
Demons
Circle I · Worms
- The Demon Morris, First Worm of the Net
- The Demon ILOVEYOU, the False Lover
- The Demon Code Red, Defacer of IIS
- The Demon Slammer, Lightning in a Single Packet
- The Demon Blaster, Who Rebooted Without Rest
- The Demon Sasser, Who Came Uninvited
- The Demon Mydoom, Swiftest of the Cursed Postmen
- The Demon Conficker, Lord of Generated Domains
Circle II · Legions (botnets)
Circle III · Ransomware and extortion
- The Demon CryptoLocker, Father of All Ransoms
- The Demon WannaCry, the Worm That Wept in Bitcoin
- The Demon Ryuk, Big-Game Hunter
- The Demon REvil, the Franchised Blackmailer
- The Demon Conti, Bookkeeper of Evil
- The Demon LockBit, Prince of the Leak Sites
- The Demon Cl0p, Thief of Transfers
- The Demon BlackCat, the Rusty Black Cat
- The Demon DarkSide, Who Drained a Pipeline
- The Demon Hive, Queen of an Infiltrated Hive
- The Demon Maze, Inventor of the Pillory
Circle IV · Destroyers (wipers)
Circle V · State espionage
- The Demon Stuxnet, Who Made Centrifuges Dizzy
- The Demon Flame, the Fake Update
- The Demon Duqu, Brother of Stuxnet
- The Demon Regin, the Silent One
- The Demon Pegasus, the Winged Horse Without a Click
- The Demon Industroyer, Who Switched Off Kyiv
- The Demon TRITON, Enemy of Safety Systems
- The Demon Snake, the Twenty-Year Serpent
- The Demon Sandworm, the Worm of the Sands
- The Demon Lazarus, Who Rises for Money
Circle VI · Banking trojans and infostealers
Scourges
- The Plague of the Morris Worm
- The Great Silence of AT&T
- The Pestilence of Melissa
- The Scourge of Mafiaboy
- The Poisoned Love Letter
- The Red Scourge of Code Red
- The Scourge of Nimda, Admin Backwards
- The Great Plague of Slammer
- The Scourge of Blaster, the Rebooter
- The Scourge of MyDoom
- The Scourge of Sasser
- The Siege of Tallinn
- The Scourge of Conficker
- The Scourge of Aurora
- The Scourge of Stuxnet
- The Scourge of the Betrayed Token
- The Great Silence of the PlayStation
- The Scourge of the Flame
- The Downfall of Knight Capital
- The Scourge of Shamoon
- The Scourge of the Christmas Target
- The Scourge of the Guardians of Peace
- The Scourge of the Federal Files
- Winter Darkness in Ukraine
- The Great Bangladesh Bank Heist
- The Scourge of Mirai
- The Scourge of Industroyer
- The Great Plague of WannaCry
- The Scourge of NotPetya
- The Scourge of Equifax
- The Scourge of TRITON, Enemy of Safety
- The Scourge of SamSam in Atlanta
- The Scourge of LockerGoga at Norsk Hydro
- The Scourge of the Misconfigured Cloud
- The Scourge of the Doubled Bitcoin
- In Memoriam: the Attack on Düsseldorf University Hospital
- The Scourge of SUNBURST
- The Scourge of ProxyLogon
- The Scourge of the Pipeline
- The Scourge of Ireland's Health Service
- The Great Eclipse of Fastly
- The Scourge of Kaseya
- The Day Facebook Vanished
- The Great Scourge of Log4Shell
- The Scourge of the Satellite Modems
- The Scourge of Costa Rica
- The Scourge of MOVEit
- The Scourge of MGM, When the House Lost
- The Scourge of the British Library
- The Scourge of Change Healthcare
- In Memoriam: the Synnovis Attack
- The Scourge of the Car Dealers
- The Friday of the Blue Screens
- The Great Bybit Heist
- The Scourge of Jaguar Land Rover
- The Day us-east-1 Fell Silent
Miracles
- The Miracle of Kaminsky's Patch
- The Miracle of Rustock's Silence
- The Miracle of the Coreflood Stop
- The Miracle of Operation Tovar
- The Miracle of No More Ransom
- The Miracle of the Halted Avalanche
- The Miracle of MalwareTech's Domain
- The Miracle of the Ladybird
- The Miracle of the Recovered Ransom
- The Miracle of the Universal Key
- The Miracle of the Log4Shell Report
- The Miracle of the Bitfinex Bitcoin
- The Miracle of the Emptied Hive
- The Miracle of the Duck Hunt
- The Miracle of Operation Cronos
- The Miracle of the 500 Milliseconds
- The Miracle of Operation Endgame
Fathers of the Church
- Saint 2600 Hz, Church Father of the Injectors
- Saint Trusting Trust, Father of the Church
- Saint TCP Sequence Prediction, Father of the Church
- Saint Morris, Church Father and First of the Worms
- Saint NeXT 'me' User, Father of the Church
- Saint rlogin -froot, Father of the Church
- Saint Mitnick, Father of the Christmas Attack
- Saint Netscape of Chance, Father of the Church
- Saint phf, Father of the Church
- Saint SYN Flood, Father of the Church
- Saint Ping of Death, Father of the Church
- Saint WinNuke, Apostle of the Blue Screen
- Saint F00F, Church Father Who Froze the Pentium
- Saint Teardrop, Father of the Church
- Saint Land, Church Father Who Talked to Himself
- Saint Smurf, Father of the Church and Multiplier of Pings
- Saint Bleichenbacher Million Message Attack, Father of the Church
Blesseds
- Blessed BLACKNURSE, Who Felled Firewalls With Little
- Blessed FortiBleed
- Blessed DoubleAgent, Who Played Both Sides
- Blessed DirtyTooth, Who Eavesdropped Through the Speakers
- Blessed doorLock
- Blessed BREACH
- Blessed SpamChannel
- Blessed Randstorm
- Blessed Sitting Duck, Who Left Domains Defenceless
- Blessed Sadlock
- Blessed Squiblydoo, Who Spoke in the Voice of Trusted Programs
- Blessed Cloudbleed, Who Bled Into the Cache
- Blessed Gargoyle
- Blessed ZipperDown, Who Unzipped the Apps
- Blessed Hole196, the Hole at the Foot of Page 196
- Blessed Hell's Gate
- Blessed ReVoLTE
- Blessed Light Commands
- Blessed Phwned
- Blessed NoToken / BadCSRF
- Blessed SHAttered, Who Broke SHA-1
- Blessed BitErrant, Pilgrim of the Torrent
- Blessed Ring-Road, Who Measured Passwords From Outside
- Blessed Antbleed
- Blessed GhostHook, Who Slipped Past the Kernel Guard
- Blessed Golden SAML
- Blessed SirenJack, Who Stole the Sirens' Voice
- Blessed CarsBlues
- Blessed SMoTherSpectre, Who Listened to the Branch
- Blessed Simjacker
- Blessed SiteCloak
- Blessed EtherOops
- Blessed tsuNAME
- Blessed VoltPillager
- Blessed Spook.js, Specter of the Browser
- Blessed Key Overwriting (KO)
- Blessed MEGA-awry, Who Opened the Encrypted Vault
- Blessed SGX.Fail, Who Counted the Enclave's Falls
- Blessed Blank Image
- Blessed BlueTrust
Minor saints
- Saint WHILL, Who Paired With Anyone
- Saint EVO Nano, Who Lost His Compass
- Saint Smart Toilet, Who Left Debug Open
- Saint Colourful Keyboard, Who Blushed at Every Key
- Saint FortiClient, Who Signed the Key With His Own Name
- Saint Dota 2, of the Custom Maps
- Saint Energizer DUO, of the Charger With a Back Door
- Saint Energetic, Protector of Wireless
- Saint PX4 Geofence, the Drone That Ignored the Signs
- Saint M365 Scooter, Who Accelerated on His Own
- Saint Giphy, Who Saved GIFs Wherever
- Saint Better Zip Bomb, Who Exploded Without Nesting
- Saint xtrlock Multitouch, Who Let You Touch the Locked Screen
- Saint Nokia OBEX, Who Fell for a Filename
- Saint Dual_EC_DRBG, of Suspicious Randomness
- Saint Deck Mate 2, Who Shuffled With the Cards Face Up
- Saint Ovulation Calculator Plugin
- Saint Zero, Who Signed Every Message
- Saint Harmony Hub, With Spare Keys in the House
- Saint Fermax, Who Opened the Door With the Right Tone
- Saint HomeKit Smart Lock
- Saint BiSecur, Who Opened Garages With a Single Whisper