Mikko Hyppönen MEMBER_OF F-Secure
Mikko states that he is the chief research officer of F-Secure.
Explicit Confidence 99% · Mikko Hyppönen EP 74 Details
“I am the chief research officer for F-Secure Corporation”
Episode
15 September 2020 Official episode · Official transcript
botnet research cybercrime incident response
The episode covers attacks against high-stakes online poker players, Mikko Hyppönen’s malware research career, historical PC viruses, email worms, botnets, and the Hyppönen Law.
Topics: Hotel-room compromise of a poker player’s laptop, Remote-access malware and screenshot capture, Trojanized poker utility software, Evil maid attacks, Targeted attacks against high-stakes online poker players, WHOIS and historical WHOIS investigation, Magnetic-stripe hotel key security, Polymorphic and metamorphic malware, Virtual-machine malware analysis, Early PC-virus history, Email worms and self-propagation, Botnets and command-and-control servers, Encrypted malware payloads, Hyppönen Law and IoT security
Links published on the Darknet Diaries episode page. Not LLM output.
Qualified statements from this episode, not graph facts.
Mikko Hyppönen MEMBER_OF F-Secure
Mikko states that he is the chief research officer of F-Secure.
Explicit Confidence 99% · Mikko Hyppönen EP 74 Details
“I am the chief research officer for F-Secure Corporation”
Mikko Hyppönen MEMBER_OF Data Fellows
Mikko says he joined Data Fellows in 1991 as employee number six.
Explicit Confidence 99% · Mikko Hyppönen EP 74 Details
“I joined a company called Data Fellows in 1991 as employee number six.”
Data Fellows SAME_AS F-Secure
Mikko says Data Fellows was renamed F-Secure in 1999 and that it is the same company.
Explicit Confidence 99% · Mikko Hyppönen EP 74 Details
“The company isn’t called Data Fellows anymore because we renamed the company to F-Secure in 1999”
“But yeah, it is the same company.”
Pot odds calculator CONTAINS Remote access Trojan
F-Secure found that a pot-odds calculator installed by a poker player contained a remote access Trojan.
Explicit Confidence 99% · Mikko Hyppönen EP 74 Details
“there was this tool for calculating pot odds which contained, again, a remote access Trojan.”
F-Secure USES WHOIS records
F-Secure researchers use WHOIS records, including historical WHOIS records, to help identify people involved with malware.
Explicit Confidence 96% · Mikko Hyppönen EP 74 Details
“one of the most typical ways we have been able to figure out who’s involved with a piece of malware is WHOIS records.”
F-Secure USES Virtual machine malware analysis
Mikko describes F-Secure's malware-analysis approach of executing malware in a virtual machine so it can decrypt and reveal its payload.
Explicit Confidence 96% · Mikko Hyppönen EP 74 Details
“we would simply execute the malware in a virtual machine”
Whale USES Polymorphic malware
Mikko says Whale used metamorphic or polymorphic algorithms and rewrote itself when replicating.
Explicit Confidence 99% · Mikko Hyppönen EP 74 Details
“These are viruses which would use metamorphic or polymorphic algorithms, including Whale.”
“Every time the Whale malware would replicate to a new file, it would rewrite itself.”
Sobig USES Command and control
Sobig.F infected computers contacted command-and-control servers controlled by the malware author for instructions.
Explicit Confidence 99% · Mikko Hyppönen EP 74 Details
“every single infected computer would contact ten different servers. These would be command and control servers controlled by the malware author.”
Winvir DISCOVERED_BY Mikko Hyppönen
Mikko says he and a coder named Ismo found what they determined was the first Windows virus and named it Winvir.
Explicit Confidence 96% · Mikko Hyppönen EP 74 Details
“me and Ismo, one of our coders at the time, spent a couple of days trying to figure out this sample.”
“It turned out to be the very first Windows virus in history. Well, we named it.”
Malware Museum PART_OF Internet Archive
Jack directs listeners to the Malware Museum at the Internet Archive.
Explicit Direction flagged Confidence 91% · Mikko Hyppönen EP 74 Details
“visiting the Malware Museum at the internet archive”
Mikko Hyppönen ASSOCIATED_WITH Hyppönen Law
The Hyppönen Law is explicitly associated with Mikko and named after him, although Mikko says he did not originally coin it as a law.
Explicit Confidence 98% · Jack Rhysider EP 74 Details
“There’s a law named after you”
“there’s a Wikipedia page for the Hyppönen Law”
Mikko Hyppönen MENTIONS Brain
Mikko discusses Brain and says he analyzed Brain.A when he began professionally analyzing malware.
Explicit Confidence 98% · Mikko Hyppönen EP 74 Details
“I did go through the Brain.A code as well when I started professionally doing malware analyzes.”
Works mentioned in the transcript. Distinct from show-note sources.
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T06:38:12.265551+00:00