After preventing malware for many years, this cybersecurity veteran is now hacking drones

[ad_1] Mikko Hyppönen is pacing backwards and forwards on the stage, along with his trademark darkish blonde ponytail resting on an impeccable teal swimsuit. A seasoned speaker, he's making an attempt to make an essential level to a room stuffed with fellow hackers and safety researchers at one of many trade’s international annual meet-ups.

“I typically name this ‘cybersecurity Tetris’,” he tells the viewers with a severe face, reeling off the foundations of the basic online game. If you full an entire line of bricks, the row vanishes, leaving the remainder of the bricks to fall into a brand new line.

“So your successes disappear, whereas your failures pile up,” he tells the viewers throughout his keynote at Black Hat in Las Vegas in 2025. “The problem we face as cybersecurity folks is that our work is invisible… while you do your job completely, the top result's that nothing occurs.”

Hyppönen’s work, nonetheless, has actually not been invisible. As one of many trade’s longest serving cybersecurity figures, he has spent greater than 35 years preventing malware. When he began within the late Nineteen Eighties, the time period “malware” was nonetheless removed from on a regular basis parlance; the phrases as an alternative have been pc “virus” or “trojans.” The web was nonetheless one thing few folks had entry to, and a few viruses relied on infecting computer systems with floppy disks.

Since then, Hyppönen estimated he has analyzed hundreds of various sorts of malware. And because of his frequent talks at conferences everywhere in the world, he has turn out to be probably the most recognizable faces and revered voices of the cybersecurity group.

Whereas Hyppönen has spent a lot of his life making an attempt to maintain malware from stepping into locations it isn't purported to, now he's nonetheless doing a lot of the identical, albeit a barely totally different tack: His new problem is to guard folks in opposition to drones.

Hyppönen, who's Finnish, informed me throughout a current interview that he lives about two hours away from Finland’s border with Russia. An more and more hostile Russia and its 2022 full-scale invasion of Ukraine, the place the vast majority of deaths have reportedly come from unmanned aerial assaults, have made Hyppönen imagine he can have renewed influence by preventing drones.

For Hyppönen, it is usually a matter of recognizing that whereas there are nonetheless long-standing issues to unravel on this planet of cybersecurity — malware will not be going wherever and there are many new issues on the horizon — the trade has made large strides over the past 20 years. An iPhone, Hyppönen introduced up for example, is an especially safe system. The cybersecurity features of drone warfare, alternatively, stay virtually uncharted territory.

<img loading="lazy" decoding="async" width="1024" height="768" src="https://techcrunch.com/wp-content/uploads/2026/04/mikko-hypponnen-1.jpeg" alt="a younger Mikko Hyppönen surrounded by computers." class="wp-image-3109291" srcset="https://techcrunch.com/wp-content/uploads/2026/04/mikko-hypponnen-1.jpeg 1024w, https://techcrunch.com/wp-content/uploads/2026/04/mikko-hypponnen-1.jpeg?resize=150,113 150w, https://techcrunch.com/wp-content/uploads/2026/04/mikko-hypponnen-1.jpeg?resize=300,225 300w, https://techcrunch.com/wp-content/uploads/2026/04/mikko-hypponnen-1.jpeg?resize=768,576 768w, https://techcrunch.com/wp-content/uploads/2026/04/mikko-hypponnen-1.jpeg?resize=680,510 680w, https://techcrunch.com/wp-content/uploads/2026/04/mikko-hypponnen-1.jpeg?resize=430,323 430w, https://techcrunch.com/wp-content/uploads/2026/04/mikko-hypponnen-1.jpeg?resize=720,540 720w, https://techcrunch.com/wp-content/uploads/2026/04/mikko-hypponnen-1.jpeg?resize=900,675 900w, https://techcrunch.com/wp-content/uploads/2026/04/mikko-hypponnen-1.jpeg?resize=800,600 800w, https://techcrunch.com/wp-content/uploads/2026/04/mikko-hypponnen-1.jpeg?resize=668,501 668w, https://techcrunch.com/wp-content/uploads/2026/04/mikko-hypponnen-1.jpeg?resize=500,375 500w, https://techcrunch.com/wp-content/uploads/2026/04/mikko-hypponnen-1.jpeg?resize=823,617 823w, https://techcrunch.com/wp-content/uploads/2026/04/mikko-hypponnen-1.jpeg?resize=708,531 708w, https://techcrunch.com/wp-content/uploads/2026/04/mikko-hypponnen-1.jpeg?resize=50,38 50w" sizes="auto, (max-width: 1024px) 100vw, 1024px"/> Picture Credit:courtesy of Mikko Hypponen

From viruses and worms to malware and spyware and adware…

Hyppönen began early in cybersecurity by hacking video video games in the course of the Nineteen Eighties. His love for cybersecurity got here from reverse engineering software program to determine a method to take away anti-piracy protections from a Commodore 64 video games console. He realized to code by growing journey video games, and sharpened his reverse engineering abilities by analyzing malware at his first job at Finnish firm Knowledge Fellows, which later grew to become the well-known antivirus maker F-Safe.

Since then, Hyppönen has been on the entrance traces of the struggle in opposition to malware, witnessing the way it advanced.

Within the early years, virus writers developed their malicious code typically completely out of ardour and curiosity to see what was doable with code alone. Whereas some cyberespionage existed, hackers had but to find methods to monetize hacking by right this moment’s requirements, like ransomware assaults. There was no cryptocurrency to facilitate extortion, nor a prison market for stolen knowledge.

Kind.A, for instance, was probably the most widespread viruses within the early Nineties, which contaminated computer systems with a floppy disk. A model of that virus didn't destroy something — generally simply displaying a message on the particular person’s display screen, and that was it. However the virus travelled around the globe, together with touchdown on the analysis stations on the South Pole, Hyppönen informed me.

Hyppönen recounted the notorious ILOVEYOU virus, which he and his colleagues have been the primary to find in 2000. ILOVEYOU was wormable, which means it unfold routinely from pc to pc. It arrived by way of electronic mail as a textual content file, purportedly a love letter. If the goal opened it, it will overwrite and corrupt some recordsdata on the particular person’s pc, after which ship itself to all their contacts.

The virus contaminated over 10 million Home windows computer systems worldwide.

Malware has modified dramatically since then. Nearly nobody develops malware as a pastime, and creating malicious software program that self-replicates is virtually a assure that it's going to get caught by cybersecurity defenders able to neutralizing it rapidly, and doubtlessly catching its creator.

Nobody does it for the love of the sport anymore, in accordance with Hyppönen. “The age of viruses is firmly behind us,” he mentioned.

Seldom will we now see self-spreading worms — with uncommon exceptions, such because the harmful WannaCry ransomware assault by North Korea in 2017; and the NotPetya mass-hacking marketing campaign launched by Russia later that yr, which crippled a lot of the Ukrainian web and energy grid. Now, malware is nearly completely utilized by cybercriminals, spies, and mercenary spyware and adware makers who develop exploits for government-backed hacking and espionage. These teams usually keep within the shadows, and need to hold their instruments hidden to proceed their actions and to keep away from cybersecurity defenders or legislation enforcement.

The opposite variations right this moment are that the cybersecurity trade is now estimated to be price $250 billion. The trade has professionalized, partially as a necessity, to struggle the rise in malware assaults. Defenders went from freely giving their software program without cost, to turning it right into a paid service or product, mentioned Hyppönen.

Computer systems and newer innovations like smartphones, which started to take off in the course of the early 2000s, have turn out to be a lot tougher to hack. If the instruments to hack an iPhone or the Chrome browser value six-figures or perhaps a few million {dollars}, Hyppönen argued, this successfully makes an exploit so costly that solely the extremely resourced, like governments, can use them, fairly than financially motivated cybercriminals. That’s an enormous win for shoppers, and for the cybersecurity trade that’s a job properly finished.

<img loading="lazy" decoding="async" width="1600" height="1200" src="https://techcrunch.com/wp-content/uploads/2026/04/mikkohypponen-2.jpeg" alt="a photo of a younger Mikko Hyppönen, wearing a blue shirt and tie, on a purple chair, with his feet up and a laptop with stickers on his lap." class="wp-image-3109292" srcset="https://techcrunch.com/wp-content/uploads/2026/04/mikkohypponen-2.jpeg 1600w, https://techcrunch.com/wp-content/uploads/2026/04/mikkohypponen-2.jpeg?resize=150,113 150w, https://techcrunch.com/wp-content/uploads/2026/04/mikkohypponen-2.jpeg?resize=300,225 300w, https://techcrunch.com/wp-content/uploads/2026/04/mikkohypponen-2.jpeg?resize=768,576 768w, https://techcrunch.com/wp-content/uploads/2026/04/mikkohypponen-2.jpeg?resize=680,510 680w, https://techcrunch.com/wp-content/uploads/2026/04/mikkohypponen-2.jpeg?resize=1200,900 1200w, https://techcrunch.com/wp-content/uploads/2026/04/mikkohypponen-2.jpeg?resize=1280,960 1280w, https://techcrunch.com/wp-content/uploads/2026/04/mikkohypponen-2.jpeg?resize=430,323 430w, https://techcrunch.com/wp-content/uploads/2026/04/mikkohypponen-2.jpeg?resize=720,540 720w, https://techcrunch.com/wp-content/uploads/2026/04/mikkohypponen-2.jpeg?resize=900,675 900w, https://techcrunch.com/wp-content/uploads/2026/04/mikkohypponen-2.jpeg?resize=800,600 800w, https://techcrunch.com/wp-content/uploads/2026/04/mikkohypponen-2.jpeg?resize=1536,1152 1536w, https://techcrunch.com/wp-content/uploads/2026/04/mikkohypponen-2.jpeg?resize=668,501 668w, https://techcrunch.com/wp-content/uploads/2026/04/mikkohypponen-2.jpeg?resize=500,375 500w, https://techcrunch.com/wp-content/uploads/2026/04/mikkohypponen-2.jpeg?resize=823,617 823w, https://techcrunch.com/wp-content/uploads/2026/04/mikkohypponen-2.jpeg?resize=708,531 708w, https://techcrunch.com/wp-content/uploads/2026/04/mikkohypponen-2.jpeg?resize=50,38 50w" sizes="auto, (max-width: 1600px) 100vw, 1600px"/> Picture Credit:courtesy of Mikko Hypponen

From preventing spies and criminals… to countering drones

In mid-2025, Hyppönen pivoted from cybersecurity to a unique form of defensive work. He grew to become the chief analysis officer at Sensofusion, a Helsinki-based firm that develops an anti-drone system for legislation enforcement companies and the navy.

Hyppönen informed me that was motivated to get right into a growing new trade due to what he noticed occurring in Ukraine, a warfare outlined by drones. As a Finnish citizen, who serves within the navy reserves (“I can’t let you know what I do, however I can let you know that they don’t give me a rifle as a result of I’m far more harmful with a keyboard,” he tells me), and with two grandfathers who fought the Russians, Hyppönen is conscious about the presence of an enemy simply over his nation’s border.

“The state of affairs may be very, essential to me,” he tells me. “It’s extra significant to work preventing in opposition to drones, not simply the drones that we see right this moment, but in addition the drones of tomorrow,” he mentioned. “We’re on the facet of people in opposition to machines, which sounds slightly bit like science fiction, however that’s very concretely what we do.”

The cybersecurity and drone industries could appear leagues other than each other, however there are clear parallels between preventing malware and preventing drones, in accordance with Hyppönen. To struggle malware, cybersecurity firms have provide you with mechanisms, referred to as signatures, to determine what's malware and what's not after which detect and block it. Within the case of drones, Hyppönen defined, defenses contain constructing programs that may find and jam radio drones, and by recognizing frequencies which might be getting used to regulate the autonomous automobiles.

Hyppönen defined that it’s doable to determine and detect drones by recording their radio frequencies, referred to as their IQ samples.

“We detect the protocol from there and construct up signatures for detecting unknown drones,” he mentioned.

He additionally defined that for those who detect the protocol and frequencies used to regulate the drone, you can too attempt to conduct cyberattacks in opposition to it. You'll be able to trigger the drone’s system to malfunction, and crash the drone into the bottom. “So in some ways, these protocol stage assaults are a lot, a lot simpler within the drone world as a result of step one is the final step,” Hyppönen mentioned. “When you discover a vulnerability, you’re finished.”

The technique in preventing malware and preventing drones will not be the one factor that hasn’t modified in his life. The cat-and-mouse sport of studying tips on how to cease a risk, after which the enemy studying from that and devising new methods to get round defenses, and on and on, is identical on this planet of drones. After which, there’s the identification of the enemy.

“I spent a giant a part of my profession preventing in opposition to Russian malware assaults,” he mentioned. “Now I’m preventing Russian drone assaults.”