TL;DR
Bernardo Quintero tracked down the creator of a 1992 program known as Virus Málaga after 33 years, closing a personal chapter that helped define his career in cybersecurity. The virus prompted Quintero to found VirusTotal, whose 2012 acquisition by Google seeded the company’s major European security center in Málaga.
What happened
In 1992 a 2,610-byte program nicknamed Virus Málaga spread through computers at Málaga’s Polytechnic School. Tasked by a teacher to build an antivirus as a first-year student, Bernardo Quintero became fascinated with malware and security. That early encounter helped set him on a path that led to founding VirusTotal; Google acquired the startup in 2012 and the team became the nucleus of the Google Safety Engineering Center (GSEC) in Málaga. This year Quintero reopened an investigation into the virus’s origins, examining old code and following tips from the local community. He discovered a signature string—"KIKESOYYO"—which his research and corroborating witnesses interpreted as "Kike soy yo," pointing to a programmer nicknamed Kike (Enrique). A tipster identified the likely author as Antonio Astorga; Astorga’s sister confirmed his full name was Antonio Enrique, though he had died of cancer. Astorga’s virus reportedly carried an anti-ETA message; he later became a computing teacher whose school named an IT classroom in his memory. Quintero shared the resolution on LinkedIn and reflected on Málaga’s present-day talent pipeline, including Astorga’s son, a recent software engineering graduate interested in cybersecurity and quantum computing.
Why it matters
- Shows how an early, local cybersecurity incident helped launch a career that influenced Europe’s commercial security landscape.
- Links a small, largely harmless malware outbreak to the creation of VirusTotal and, later, Google’s flagship security presence in Málaga.
- Highlights the human side of cybersecurity history, including anonymous authorship, local recognition, and intergenerational talent development.
- Underscores the role of university-industry ties (VirusTotal and University of Málaga collaborations) in forming a regional tech talent hub.
Key facts
- Virus Málaga first circulated in 1992 and measured 2,610 bytes.
- Quintero was asked in his first year at Málaga’s Polytechnic School to build an antivirus for the program; that challenge influenced his career choice.
- Bernardo Quintero later founded VirusTotal; Google acquired the company in 2012.
- Google’s acquisition of VirusTotal contributed to the formation of the Google Safety Engineering Center (GSEC) in Málaga.
- In 2025 Quintero reexamined the virus code and found the signature string "KIKESOYYO," interpreted as "Kike soy yo" ("I am Kike").
- A tipster identified the likely author as Antonio Astorga; his sister confirmed his full name was Antonio Enrique, and he had died of cancer.
- Astorga’s virus reportedly contained a payload condemning the Basque terrorist group ETA.
- Antonio Enrique Astorga later worked as a computing teacher; a secondary school named its IT classroom after him.
- One of Astorga’s sons, Sergio, is a recent software engineering graduate with interests in cybersecurity and quantum computing.
What to watch next
- Ongoing collaboration between Google’s Málaga security center and the University of Málaga that supports local talent development (reported as having been spearheaded by VirusTotal; future projects not detailed).
- Whether Quintero or Google pursue formal recognition or archival documentation of early local contributors to Málaga’s cybersecurity ecosystem (not confirmed in the source).
- Plans for further expansion of Google’s GSEC in Málaga or new hiring initiatives tied to the city’s growing talent pool (not confirmed in the source).
Quick glossary
- Computer virus: A type of malicious software that can replicate itself and spread between computers, sometimes performing additional harmful or benign actions.
- Payload: In malware terminology, the component that executes the primary action or message of the program beyond replication.
- Antivirus: Software or tools designed to detect, prevent, and remove malicious programs from computers and networks.
- Acquisition: A business transaction where one company purchases another, often to integrate technology, teams, or products.
Reader FAQ
Who found the creator of Virus Málaga?
Spanish entrepreneur Bernardo Quintero traced clues in the virus code and followed local tips to identify the likely author.
Who was identified as the author?
A local programmer identified as Antonio Enrique Astorga (nicknamed Kike); he had died prior to the investigation’s public resolution.
Did the virus cause major damage?
The virus was described as mostly harmless in the source.
How did this lead to Google in Málaga?
Quintero founded VirusTotal; Google acquired the startup in 2012, and that team became the root of Google’s Safety Engineering Center in Málaga.
After 33 years, Bernardo Quintero decided it was time to find the person who changed his life — the anonymous programmer who created a computer virus that had infected his…
Sources
- How a Spanish virus brought Google to Málaga
- The story of the Málaga virus: The code that haunted Google's …
- Malaga: Europe's New 'Tech Titan'
Related posts
- FedRAMP Authorization and CMMC Level 2: New Baseline for GovCon AI
- Mattermost restricts access to older posts after 10,000-message cap is reached
- Using Google Maps features to make daily commutes less stressful