What changed?
Email became ubiquitous and carried social context. A message’s apparent familiarity, curiosity, or urgency could influence a person’s decision more effectively than a purely technical route.
How it spread / worked conceptually
A received message can lead to trust or curiosity, then a user action, then contact-network amplification. This is a conceptual account, not a phishing template.
Why it mattered
It made clear that security incidents can exploit human decision-making as well as software defects. Trust between known contacts can amplify spread.
Representative historical examples
ILOVEYOU (2000) and Mydoom (2004) are widely remembered mass-mailing incidents of this period.
What defenders learned
Defenders combined attachment controls and filtering with clear user education, reporting paths, and safer default behaviors.
What changed next?
Malware increasingly became less about spectacle and more about control, persistence, and money.