Proof-of-concept

A proof-of-concept is the earliest implementation of an idea. A proof-of-concept malware usually contains code that runs on new platforms and programs or takes advantage of newly discovered vulnerabilities.

Proof-of-concept malware often perform actions that have never been done before. For example, VBS_BUBBLEBOY was a proof-of-concept worm - it was the first email worm to automatically execute without requiring recipients to double-click on an attachment. Most proof-of-concept malware are never seen in-the-wild. However, malware writers will often take the idea (and code) behind a proof-of-concept malware and implement it in future malware.