A 33-Year Search for a Cybersecurity Pioneer: The Story Behind VirusTotal and ‘Virus Málaga’
Table of Contents
A decades-long quest to identify the creator of a seemingly harmless computer virus has revealed a remarkable story of inspiration, loss, and the unlikely origins of a cybersecurity powerhouse. After 33 years, Bernardo Quintero, founder of VirusTotal, embarked on a mission to find the anonymous programmer whose creation sparked his lifelong passion and ultimately led to the transformation of Málaga, Spain, into a European tech hub.
From University Challenge to Global Cybersecurity Leader
The story began in 1992 at Málaga’s Polytechnic School, where a 2610-byte program – dubbed “Virus Málaga” – spread across campus computers. A young Quintero was tasked by a teacher with creating an antivirus solution. “That challenge in my first year at university sparked a deep interest in computer viruses and security, and without it my path might have been very different,” Quintero told TechCrunch. This initial encounter ignited a passion that would eventually lead to the founding of VirusTotal, a platform acquired by Google in 2012.
The acquisition of VirusTotal wasn’t just a business deal; it catalyzed the growth of Málaga as a center for technological innovation. Google’s flagship European cybersecurity center was established in the city, fostering collaborations with the University of Málaga and attracting a new generation of talent.
A Nostalgic Search and a Cryptic Clue
Driven by nostalgia and gratitude, Quintero launched a public search earlier this year, appealing to Spanish media for assistance. He revisited the virus’s code, hoping to uncover clues his younger self had overlooked. His programmer instincts led him to reexamine the malware, eventually discovering fragments of a signature. With the help of another security expert, he unearthed a clearer message embedded within a later variant: “KIKESOYYO,” which translates to “I am Kike,” a common nickname for “Enrique.”
Around the same time, Quintero received a direct message from an individual now serving as the general digital transformation coordinator for the Spanish city of Cordoba. This person claimed to have witnessed a classmate create the virus and revealed a crucial detail: the virus’s hidden message, or “payload,” was a condemnation of the Basque terrorist group ETA – information Quintero had never publicly shared.
A Bittersweet Revelation and a Lasting Legacy
The tipster identified the virus’s creator as Antonio Astorga, but also delivered the heartbreaking news of his passing. Despite this setback, Quintero continued his investigation, ultimately learning from Astorga’s sister that his first name was Antonio Enrique, and that “Kike” was the name his family used.
Astorga succumbed to cancer before Quintero could express his gratitude in person. However, Quintero’s subsequent LinkedIn post illuminated Astorga’s legacy as “a brilliant colleague who deserves to be recognized as a pioneer of cybersecurity in Málaga.” According to friends, Astorga’s virus was motivated by a desire to spread his anti-terrorist message and demonstrate his programming skills.
Astorga’s passion for IT continued throughout his life, leading him to become a computing teacher at a secondary school that honored his memory by naming its IT classroom after him. His influence extends beyond the classroom, as his son, Sergio, is a recent software engineering graduate specializing in cybersecurity and quantum computing – a connection Quintero finds profoundly meaningful. “Being able to close that circle now, and to see new generations building on it, is deeply meaningful to me,” Quintero said.
For Quintero, who anticipates future collaborations with Sergio, the young graduate represents the burgeoning talent within Málaga. This growth, he believes, is a direct result of the foundation laid by VirusTotal and the subsequent establishment of the Google Safety Engineering Center (GSEC), which has fostered strong partnerships with the University of Málaga and solidified the city’s position as a leading cybersecurity hub.
